From 7056d91ab6c1e24dfa9572cfbb018866989e2b2b Mon Sep 17 00:00:00 2001
From: Henry-Hiles <henry@henryhiles.com>
Date: Wed, 10 Jun 2026 12:17:07 -0400
Subject: [PATCH] lock down room directory

---
 modules/server/continuwuity.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/server/continuwuity.nix b/modules/server/continuwuity.nix
index c67fa09..6c5a212 100644
--- a/modules/server/continuwuity.nix
+++ b/modules/server/continuwuity.nix
@@ -57,12 +57,15 @@
 
             url_preview_domain_explicit_allowlist = [ "*" ];
             url_preview_max_spider_size = 2097152;
+
             max_request_size = 524288000;
             db_cache_capacity_mb = 2056;
 
             dns_cache_entries = 0;
 
             allow_public_room_directory_over_federation = true;
+            lockdown_public_room_directory = true;
+
             allow_incoming_presence = false;
             allow_outgoing_presence = false;
             allow_local_presence = false;