pub-solar/infra
6
1
Fork 3
Code Issues 25 Pull requests 11 Actions Packages Projects 1 Releases Wiki Activity

Merge pull request 'fix/add-matrix-wellknown' (#52) from fix/add-matrix-wellknown into main
Some checks failed
Flake checks / Check (push) Failing after 13s
Details

Browse source 
Reviewed-on: #52
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
This commit is contained in:
b12f 2023-11-08 15:33:21 +00:00
parent 8f603dad45 b085c2e2b2
commit fda21f8633
Signed by: pub.solar gitea
GPG key ID: F0332B04B7054873
1 changed files with 27 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
hosts/nachtigall/apps/nginx-matrix.nix
View file

@ -6,8 +6,25 @@ let
add_header X-XSS-Protection "1; mode=block";
'';
clientConfig = import ./matrix/element-client-config.nix;
wellKnownClient."m.homeserver".base_url = "https://matrix.test.pub.solar";
wellKnownServer."m.server" = "matrix.test.pub.solar:8448";
wellKnownClient = {
"m.homeserver".base_url = "https://matrix.pub.solar";
"m.identity_server".base_url = "https://matrix.pub.solar";
"im.vector.riot.e2ee".default = true;
"io.element.e2ee" = {
default = true;
secure_backup_required = false;
secure_backup_setup_methods = [];
};
"m.integrations" = {
managers = [
{
api_url = "https://dimension.pub.solar/api/v1/scalar";
ui_url = "https://dimension.pub.solar/element";
}
];
};
};
wellKnownServer."m.server" = "matrix.pub.solar:8448";
mkWellKnown = data: ''
add_header Content-Type application/json;
add_header Access-Control-Allow-Origin *;
@ -20,15 +37,19 @@ let
in
{
services.nginx.virtualHosts = {
"test.pub.solar" = {
root = "/dev/null";
forceSSL = lib.mkDefault true;
enableACME = lib.mkDefault true;
#####################################
# This is already in production use #
#####################################
"pub.solar" = {
locations = wellKnownLocations;
};
#######################################
# Stuff below is still in betatesting #
#######################################
"chat.test.pub.solar" = {
forceSSL = true;
enableACME = true;