nettika/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Extract matrix-synapse configs into a separate module on quasar

Browse source
This commit is contained in:
Nettika 2025-10-12 18:53:50 -07:00
parent f00ab5b5ae
commit b91fcb6500
2 changed files with 51 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

53
hosts/quasar/default.nix
View file

@ -5,6 +5,7 @@
nixosModules.nettika
nixosModules.promptmoji
agenix.nixosModules.default
./matrix.nix
];
nixpkgs.config.allowUnfree = true;
@ -26,58 +27,14 @@
environment.systemPackages = [ pkgs.htop ];
age.secrets = {
matrix-synapse-secrets = {
file = ./secrets/matrix-synapse-secrets.yaml;
mode = "400";
owner = "matrix-synapse";
};
};
services.postgresql.enable = true;
services.caddy = {
enable = true;
virtualHosts = {
"quasar.leaf.ninja".extraConfig = ''
respond "quasar is online"
header Strict-Transport-Security: "max-age=63072000; includeSubDomains"
'';
"consortium.chat".extraConfig = ''
respond /.well-known/matrix/server <<JSON
{
"m.server": "matrix.consortium.chat:443"
}
JSON 200
respond /.well-known/matrix/client <<JSON
{
"m.homeserver": {
"base_url": "https://matrix.consortium.chat"
}
}
JSON 200
reverse_proxy localhost:8008
header Strict-Transport-Security "max-age=63072000; includeSubDomains"
'';
"matrix.consortium.chat".extraConfig = ''
reverse_proxy /_matrix/* localhost:8008
reverse_proxy /_synapse/client/* localhost:8008
'';
"admin.consortium.chat".extraConfig = ''
root * ${pkgs.synapse-admin}
file_server
'';
};
};
services.matrix-synapse = {
enable = true;
settings = {
server_name = "consortium.chat";
database_type = "psycopg2";
database_args.database = "matrix-synapse";
};
extraConfigFiles = [ config.age.secrets.matrix-synapse-secrets.path ];
virtualHosts."quasar.leaf.ninja".extraConfig = ''
respond "quasar is online"
header Strict-Transport-Security: "max-age=63072000; includeSubDomains"
'';
};
programs.fish.enable = true;