From f4630467f6ef20561427a7ad585ed96943f35ec7 Mon Sep 17 00:00:00 2001
From: Felix Albrigtsen <felix@albrigtsen.it>
Date: Sat, 1 Nov 2025 19:50:55 +0100
Subject: [PATCH] defiant/matrix-synapse: require matrix-user role in keycloak

---
 hosts/defiant/services/matrix/synapse.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/defiant/services/matrix/synapse.nix b/hosts/defiant/services/matrix/synapse.nix
index 573070b..01222cc 100644
--- a/hosts/defiant/services/matrix/synapse.nix
+++ b/hosts/defiant/services/matrix/synapse.nix
@@ -88,6 +88,10 @@
             localpart_template = "{{ user.preferred_username }}";
             display_name_template = "{{ user.name }}";
           };
+          attribute_requirements = [{
+            attribute = "matrix-roles";
+            value = "matrix-user";
+          }];
           backchannel_logout_enabled = true;
           enable_registration = false;
         }