server_name: "{{ matrix_domain }}"

listeners:
  - port: {{ synapse_http_port }}
    bind_addresses: ['0.0.0.0']
    type: http
    tls: false
    x_forwarded: true
    resources:
      - names: [client, federation]
        compress: true

# -------------------------------------------------
# TURN (WebRTC) – injected from the variables above
# -------------------------------------------------
turn_uris:
  - "turn:{{ matrix_domain }}:{{ turn_listen_port }}?transport=udp"
  - "turn:{{ matrix_domain }}:{{ turn_tls_port }}?transport=tcp"
  - "turns:{{ matrix_domain }}:{{ turn_tls_port }}?transport=tcp"
turn_shared_secret: "{{ turn_secret }}"
turn_user_lifetime: "86400000"   # 1 day in ms (optional)

# -----------------------------------------------------------------
# NEW – Google OIDC provider
# -----------------------------------------------------------------
oidc_providers:
  - idp_id: google
    issuer: "https://accounts.google.com"
    client_id: "{{ google_oidc_client_id }}"
    client_secret: "{{ google_oidc_client_secret }}"
    scopes: {{ google_oidc_scopes | to_nice_yaml | indent(6) }}