machines/gerd/services/matrix-synapse.nix

@@ -56,6 +56,7 @@ in {
       max_upload_size = max_upload_size;
 
       # only authenticated media
+      # TODO: Should default to true at some point
       enable_authenticated_media = true;
 
       # retentien policies

machines/gerd/services/miniflux.nix

@@ -19,11 +19,12 @@ in {
       DISABLE_LOCAL_AUTH = "true";
 
       # use auth proxy
+      # TODO: This should be configureable
       AUTH_PROXY_HEADER = config.mine.shared.lib.authelia.protectedHeaders.username;
       AUTH_PROXY_USER_CREATION = "true";
 
       # For privacy, proxy images instead of hotlinking
-      MEDIA_PROXY_RESOURCE_TYPES = "image,audio,video";
+      MEDIA_PROXY_RESOURCE_TYPES = "image";
       MEDIA_PROXY_MODE = "all";
     };
   };