RuJect/nixos-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: RuJect:e77bc1e64104f5fd52ce4a05747d7b4fdef6c7d7
Branches Tags
RuJect:main
..
compare: RuJect:7df9d7ef4f6ebef240532884cb5b3a3c59f55775
Branches Tags
RuJect:main

No commits in common. "e77bc1e64104f5fd52ce4a05747d7b4fdef6c7d7" and "7df9d7ef4f6ebef240532884cb5b3a3c59f55775" have entirely different histories.
e77bc1e641 ... 7df9d7ef4f

1 changed files with 9 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

23
services/synapse/nginx.nix
View file

@ -1,14 +1,7 @@
{ config, ... }: { config, ... }:
let let
cfg = config.machine.synapse; inherit (config.machine.synapse) domain port;
maxUploadSize = config.services.matrix-synapse.settings.max_upload_size;
clientConfig."m.homeserver".base_url = baseUrl;
serverConfig."m.server" = "${cfg.domain}:443";
mkWellKnown = data: ''
default_type application/json;
add_header Access-Control-Allow-Origin *;
return 200 '${builtins.toJSON data}';
'';
in in
{ {
systemd.services.nginx.serviceConfig.SupplementaryGroups = [ "matrix-synapse" ]; systemd.services.nginx.serviceConfig.SupplementaryGroups = [ "matrix-synapse" ];
@ -16,16 +9,18 @@ in
services.nginx = { services.nginx = {
appendHttpConfig = '' appendHttpConfig = ''
limit_req_zone $binary_remote_addr zone=matrix:10m rate=50r/s; limit_req_zone $binary_remote_addr zone=matrix:10m rate=50r/s;
limit_conn_zone $binary_remote_addr zone=conn_limit:10m;
''; '';
virtualHosts.${cfg.domain} = { upstreams."matrix-synapse".servers = {
"unix:/run/matrix-synapse/matrix-synapse.sock" = { };
};
virtualHosts.${domain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations = { locations = {
"= /.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
"= /.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
"^~ /_matrix" = { "^~ /_matrix" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}"; proxyPass = "http://127.0.0.1:${toString port}";
extraConfig = '' extraConfig = ''
limit_req zone=matrix burst=100 nodelay; limit_req zone=matrix burst=100 nodelay;
proxy_set_header Host $host; proxy_set_header Host $host;
@ -41,7 +36,7 @@ in
# Health check # Health check
"= /health" = { "= /health" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}"; proxyPass = "http://127.0.0.1:${toString port}";
extraConfig = '' extraConfig = ''
access_log off; access_log off;
''; '';