58 lines
2.2 KiB
Nix
58 lines
2.2 KiB
Nix
|
{ config, pkgs, ... }:
|
||
|
|
let
|
||
|
|
# 1. create DNS entry `matrix.ingolf-wagner.de A - 95.216.66.212`
|
||
|
|
# 2. test with : https://federationtester.matrix.org/#ingolf-wagner.de
|
||
|
|
# 3. info at : https://silvio.github.io/docker-matrix/Example.configs.html
|
||
|
|
|
||
|
|
domain = "ingolf-wagner.de";
|
||
|
|
baseUrl = "https://matrix.${domain}";
|
||
|
|
|
||
|
|
clientConfig."m.homeserver".base_url = baseUrl;
|
||
|
|
serverConfig."m.server" = "matrix.${domain}:443";
|
||
|
|
mkWellKnown = data: ''
|
||
|
|
default_type application/json;
|
||
|
|
add_header Access-Control-Allow-Origin *;
|
||
|
|
return 200 '${builtins.toJSON data}';
|
||
|
|
'';
|
||
|
|
|
||
|
|
in
|
||
|
|
{
|
||
|
|
|
||
|
|
networking.firewall.allowedTCPPorts = [ 80 443 ];
|
||
|
|
networking.firewall.allowedUDPPorts = [ 80 443 ];
|
||
|
|
|
||
|
|
services.nginx = {
|
||
|
|
enable = true;
|
||
|
|
recommendedTlsSettings = true;
|
||
|
|
recommendedOptimisation = true;
|
||
|
|
recommendedGzipSettings = true;
|
||
|
|
recommendedProxySettings = true;
|
||
|
|
virtualHosts = {
|
||
|
|
# If the A and AAAA DNS records on example.org do not point on the same host as the
|
||
|
|
# records for myhostname.example.org, you can easily move the /.well-known
|
||
|
|
# virtualHost section of the code to the host that is serving example.org, while
|
||
|
|
# the rest stays on myhostname.example.org with no other changes required.
|
||
|
|
# This pattern also allows to seamlessly move the homeserver from
|
||
|
|
# myhostname.example.org to myotherhost.example.org by only changing the
|
||
|
|
# /.well-known redirection target.
|
||
|
|
"${domain}" = {
|
||
|
|
enableACME = true;
|
||
|
|
forceSSL = true;
|
||
|
|
# This section is not needed if the server_name of matrix-synapse is equal to
|
||
|
|
# the domain (i.e. example.org from @foo:example.org) and the federation port
|
||
|
|
# is 8448.
|
||
|
|
# Further reference can be found in the docs about delegation under
|
||
|
|
# https://element-hq.github.io/synapse/latest/delegate.html
|
||
|
|
locations."= /.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
|
||
|
|
# This is usually needed for homeserver discovery (from e.g. other Matrix clients).
|
||
|
|
# Further reference can be found in the upstream docs at
|
||
|
|
# https://spec.matrix.org/latest/client-server-api/#getwell-knownmatrixclient
|
||
|
|
locations."= /.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
|
||
|
|
};
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
}
|