rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-27 17:08:29 +02:00
Code Issues Projects Releases Packages Wiki Activity

matrix: init

Browse source
This commit is contained in:
Rouven Seifert 2023-10-17 10:39:14 +02:00
parent fdcfeb524c
commit 78a47101ac
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
7 changed files with 153 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

23
hosts/falkenstein-1/modules/nginx/default.nix
View file

@ -1,4 +1,25 @@
{ config, ... }:
# matrix homeserver discovery
let
matrix_domain = "matrix.${config.networking.domain}";
serverConfig = {
"m.server" = "${matrix_domain}:443";
};
clientConfig = {
"m.homeserver" = {
base_url = "https://${matrix_domain}";
# server_name = config.networking.domain;
};
"org.matrix.msc3575.proxy" = {
url = "https://${matrix_domain}";
};
};
mkWellKnown = data: ''
add_header Content-Type application/json;
add_header Access-Control-Allow-Origin *;
return 200 '${builtins.toJSON data}';
'';
in
{
networking.firewall.allowedTCPPorts = [ 80 443 ];
services.nginx = {
@ -12,6 +33,8 @@
enableACME = true;
forceSSL = true;
root = "/srv/web/${config.networking.domain}";
locations."/.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
locations."/.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
};
};
security.acme = {