96 lines
2.8 KiB
Nix
96 lines
2.8 KiB
Nix
{ config, pkgs, ... }:
|
|
let
|
|
inherit (import ../../../../shared/caddy-helpers.nix) logFormat;
|
|
domainName = "matrix.acomputer.lol";
|
|
in
|
|
{
|
|
sops = {
|
|
secrets = {
|
|
"matrix/syncv3_secret" = {
|
|
mode = "444";
|
|
owner = config.users.users.root.name;
|
|
inherit (config.users.users.root) group;
|
|
};
|
|
};
|
|
};
|
|
services = {
|
|
caddy.virtualHosts."${domainName}" = {
|
|
logFormat = logFormat domainName;
|
|
extraConfig = ''
|
|
reverse_proxy /client/* 127.0.0.1:8009
|
|
reverse_proxy /_matrix/client/unstable/org.matrix.msc3575/sync 127.0.0.1:8009
|
|
reverse_proxy /_matrix/* 127.0.0.1:8008
|
|
reverse_proxy /_dendrite/* 127.0.0.1:8008
|
|
reverse_proxy /_synapse/* 127.0.0.1:8008
|
|
'';
|
|
};
|
|
frp.settings.proxies = [
|
|
{
|
|
name = "http.${domainName}";
|
|
type = "http";
|
|
customDomains = [ "${domainName}" ];
|
|
localPort = 80;
|
|
transport.useCompression = true;
|
|
}
|
|
{
|
|
name = "https.${domainName}";
|
|
type = "https";
|
|
customDomains = [ "${domainName}" ];
|
|
localPort = 443;
|
|
transport.useCompression = true;
|
|
}
|
|
];
|
|
matrix-sliding-sync = {
|
|
enable = true;
|
|
settings = {
|
|
SYNCV3_SERVER = "https://${domainName}";
|
|
SYNCV3_BINDADDR = "127.0.0.1:8009";
|
|
SYNCV3_DB = "postgresql://dendrite@localhost/dendrite?sslmode=disable";
|
|
};
|
|
environmentFile = config.sops.secrets."matrix/syncv3_secret".path;
|
|
};
|
|
};
|
|
systemd.services.dendrite =
|
|
let
|
|
dendrite_package = pkgs.dendrite.overrideAttrs rec {
|
|
version = "0.13.8";
|
|
src = pkgs.fetchFromGitHub {
|
|
owner = "matrix-org";
|
|
repo = "dendrite";
|
|
rev = "v${version}";
|
|
hash = "sha256-zUpZdG2cdZ95L70qLG2HaUlD+G66XTi4f1V4+ZZAh30=";
|
|
};
|
|
vendorHash = "sha256-rGOB1ikY3BgChvD1YZUF66g8P6gE29b/k9kxvHR0+WQ=";
|
|
};
|
|
in
|
|
{
|
|
description = "Dendrite Matrix homeserver";
|
|
after = [ "network.target" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
unitConfig.RequiresMountsFor = [ "/mnt/data" ];
|
|
serviceConfig = {
|
|
Type = "simple";
|
|
User = "dendrite";
|
|
Group = "dendrite";
|
|
StateDirectory = "dendrite";
|
|
WorkingDirectory = "/mnt/data/dendrite";
|
|
RuntimeDirectory = "dendrite";
|
|
RuntimeDirectoryMode = "0700";
|
|
LimitNOFILE = 65535;
|
|
ExecStart = ''
|
|
${dendrite_package}/bin/dendrite -http-bind-address 127.0.0.1:8008 -config ${./config.yaml}
|
|
'';
|
|
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
|
|
Restart = "on-failure";
|
|
};
|
|
};
|
|
users.users.dendrite = {
|
|
name = "dendrite";
|
|
description = "Dendrite server user";
|
|
home = "/mnt/data/dendrite";
|
|
createHome = true;
|
|
group = "dendrite";
|
|
isSystemUser = true;
|
|
};
|
|
users.groups.dendrite = { };
|
|
}
|