diff --git a/hosts/nachtigall/apps/nginx-matrix.nix b/hosts/nachtigall/apps/nginx-matrix.nix index 13dc2730..cc6ea018 100644 --- a/hosts/nachtigall/apps/nginx-matrix.nix +++ b/hosts/nachtigall/apps/nginx-matrix.nix @@ -6,8 +6,25 @@ let add_header X-XSS-Protection "1; mode=block"; ''; clientConfig = import ./matrix/element-client-config.nix; - wellKnownClient."m.homeserver".base_url = "https://matrix.test.pub.solar"; - wellKnownServer."m.server" = "matrix.test.pub.solar:8448"; + wellKnownClient = { + "m.homeserver".base_url = "https://matrix.pub.solar"; + "m.identity_server".base_url = "https://matrix.pub.solar"; + "im.vector.riot.e2ee".default = true; + "io.element.e2ee" = { + default = true; + secure_backup_required = false; + secure_backup_setup_methods = []; + }; + "m.integrations" = { + managers = [ + { + api_url = "https://dimension.pub.solar/api/v1/scalar"; + ui_url = "https://dimension.pub.solar/element"; + } + ]; + }; + }; + wellKnownServer."m.server" = "matrix.pub.solar:8448"; mkWellKnown = data: '' add_header Content-Type application/json; add_header Access-Control-Allow-Origin *; @@ -20,15 +37,19 @@ let in { services.nginx.virtualHosts = { - "test.pub.solar" = { - root = "/dev/null"; - forceSSL = lib.mkDefault true; - enableACME = lib.mkDefault true; + ##################################### + # This is already in production use # + ##################################### + "pub.solar" = { locations = wellKnownLocations; }; + ####################################### + # Stuff below is still in betatesting # + ####################################### + "chat.test.pub.solar" = { forceSSL = true; enableACME = true;