2005
9216cbbf62
added logging to all nginx routes added loki, promtail to scrape nginx logs turned i2pd back on, updated my websites version upgraded all hosts to 24.05 forgejo added bigger limit to upload limit due to docker images privacy frontends: added priviblur libreddit -> redlib added biblioreads ddns-updater, changed credentials but there is a bug with porkbun added penpot brought back anonymousoverflow added readme privacy respecting frontends
42 lines
1.1 KiB
Nix
42 lines
1.1 KiB
Nix
{ pkgs, config, ... }:
|
|
let
|
|
fqdn = "${config.networking.domain}";
|
|
baseUrl = "https://${fqdn}";
|
|
clientConfig."m.homeserver".base_url = "https://matrix.${fqdn}";
|
|
serverConfig."m.server" = "${fqdn}:443";
|
|
mkWellKnown = data: ''
|
|
default_type application/json;
|
|
add_header Access-Control-Allow-Origin *;
|
|
return 200 '${builtins.toJSON data}';
|
|
'';
|
|
|
|
in
|
|
{
|
|
|
|
services.nginx = {
|
|
virtualHosts = {
|
|
"matrix.${config.networking.domain}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = " http://32.54.31.241:8008";
|
|
|
|
};
|
|
extraConfig = ''
|
|
client_max_body_size 9000M;
|
|
access_log /var/log/nginx/$server_name-access.log json_analytics;
|
|
'';
|
|
};
|
|
"${fqdn}" = {
|
|
|
|
# well known paths for matrix
|
|
locations."= /.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
|
|
locations."/_matrix".proxyPass = "http://32.54.31.241:8008";
|
|
locations."/_synapse".proxyPass = "http://32.54.31.241:8008";
|
|
locations."= /.well-known/matrix/client" .extraConfig = mkWellKnown clientConfig;
|
|
|
|
};
|
|
};
|
|
};
|
|
}
|