nixos/chatterbox: Production config
This commit is contained in:
@@ -29,9 +29,15 @@
|
||||
|
||||
secrets = {
|
||||
key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGGx50oGzm5TsaB5R6f/daFPc5QNkmM15uc9/kiBxKaY";
|
||||
files."synapse.yaml" = {
|
||||
owner = "matrix-synapse";
|
||||
group = "matrix-synapse";
|
||||
files = {
|
||||
"chatterbox/synapse.yaml" = {
|
||||
owner = "matrix-synapse";
|
||||
group = "matrix-synapse";
|
||||
};
|
||||
"chatterbox/nul.ie.signing.key" = {
|
||||
owner = "matrix-synapse";
|
||||
group = "matrix-synapse";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
@@ -42,7 +48,6 @@
|
||||
|
||||
systemd = {
|
||||
network.networks."80-container-host0" = networkdAssignment "host0" assignments.internal;
|
||||
services.matrix-synapse.enable = false;
|
||||
};
|
||||
|
||||
services = {
|
||||
@@ -51,7 +56,7 @@
|
||||
enable = true;
|
||||
withJemalloc = true;
|
||||
|
||||
extraConfigFiles = [ config.age.secrets."synapse.yaml".path ];
|
||||
extraConfigFiles = [ config.age.secrets."chatterbox/synapse.yaml".path ];
|
||||
settings = {
|
||||
server_name = "nul.ie";
|
||||
public_baseurl = "https://matrix.nul.ie";
|
||||
@@ -108,6 +113,7 @@
|
||||
"198.51.100.0/24"
|
||||
"203.0.113.0/24"
|
||||
"224.0.0.0/4"
|
||||
|
||||
"::1/128"
|
||||
"fe80::/10"
|
||||
"fc00::/7"
|
||||
@@ -121,6 +127,8 @@
|
||||
|
||||
enable_registration = false;
|
||||
allow_guest_access = false;
|
||||
|
||||
signing_key_path = config.age.secrets."chatterbox/nul.ie.signing.key".path;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
@@ -62,6 +62,7 @@ in
|
||||
{ }
|
||||
wellKnown
|
||||
];
|
||||
useACMEHost = lib.my.pubDomain;
|
||||
};
|
||||
"localhost" = {
|
||||
forceSSL = false;
|
||||
|
Reference in New Issue
Block a user