configuration.nix/hosts/wynne/services/apps/dendrite/default.nix

{ config, pkgs, ... }:
let
  inherit (import ../../../../shared/caddy-helpers.nix) logFormat;
  domainName = "matrix.acomputer.lol";
in
{
  sops = {
    secrets = {
      "matrix/syncv3_secret" = {
        mode = "444";
        owner = config.users.users.root.name;
        inherit (config.users.users.root) group;
      };
    };
  };
  services = {
    caddy.virtualHosts."${domainName}" = {
      logFormat = logFormat domainName;
      extraConfig = ''
        reverse_proxy /client/* 127.0.0.1:8009
        reverse_proxy /_matrix/client/unstable/org.matrix.msc3575/sync 127.0.0.1:8009
        reverse_proxy /_matrix/* 127.0.0.1:8008
        reverse_proxy /_dendrite/* 127.0.0.1:8008
        reverse_proxy /_synapse/* 127.0.0.1:8008
      '';
    };
    frp.settings.proxies = [
      {
        name = "http.${domainName}";
        type = "http";
        customDomains = [ "${domainName}" ];
        localPort = 80;
        transport.useCompression = true;
      }
      {
        name = "https.${domainName}";
        type = "https";
        customDomains = [ "${domainName}" ];
        localPort = 443;
        transport.useCompression = true;
      }
    ];
    matrix-sliding-sync = {
      enable = true;
      settings = {
        SYNCV3_SERVER = "https://${domainName}";
        SYNCV3_BINDADDR = "127.0.0.1:8009";
        SYNCV3_DB = "postgresql://dendrite@localhost/dendrite?sslmode=disable";
      };
      environmentFile = config.sops.secrets."matrix/syncv3_secret".path;
    };
  };
  systemd.services.dendrite =
    let
      dendrite_package = pkgs.dendrite.overrideAttrs rec {
        version = "0.13.8";
        src = pkgs.fetchFromGitHub {
          owner = "matrix-org";
          repo = "dendrite";
          rev = "v${version}";
          hash = "sha256-zUpZdG2cdZ95L70qLG2HaUlD+G66XTi4f1V4+ZZAh30=";
        };
        vendorHash = "sha256-rGOB1ikY3BgChvD1YZUF66g8P6gE29b/k9kxvHR0+WQ=";
      };
    in
    {
      description = "Dendrite Matrix homeserver";
      after = [ "network.target" ];
      wantedBy = [ "multi-user.target" ];
      unitConfig.RequiresMountsFor = [ "/mnt/data" ];
      serviceConfig = {
        Type = "simple";
        User = "dendrite";
        Group = "dendrite";
        StateDirectory = "dendrite";
        WorkingDirectory = "/mnt/data/dendrite";
        RuntimeDirectory = "dendrite";
        RuntimeDirectoryMode = "0700";
        LimitNOFILE = 65535;
        ExecStart = ''
          ${dendrite_package}/bin/dendrite -http-bind-address 127.0.0.1:8008 -config ${./config.yaml}
        '';
        ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
        Restart = "on-failure";
      };
    };
  users.users.dendrite = {
    name = "dendrite";
    description = "Dendrite server user";
    home = "/mnt/data/dendrite";
    createHome = true;
    group = "dendrite";
    isSystemUser = true;
  };
  users.groups.dendrite = { };
}