phfroidmont/self-hosting
1
0
Fork 0
mirror of https://github.com/phfroidmont/self-hosting.git synced 2025-12-25 05:36:59 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Forward acme requests for banditlair.com

Browse source
This commit is contained in:
Paul-Henri Froidmont 2021-09-13 15:33:38 +02:00
parent df9573573c
commit f0ff9d3a9f
Signed by: phfroidmont
GPG key ID: BE948AFD7E7873BE
1 changed files with 11 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

21
modules/synapse.nix
View file

@ -4,7 +4,7 @@ let
let
join = hostName: domain: hostName + lib.optionalString (domain != null) ".${domain}";
in
join "matrix" config.networking.domain;
join "matrix" config.networking.domain;
in
{
security.acme.email = "letsencrypt.account@banditlair.com";
@ -18,6 +18,7 @@ in
"${config.networking.domain}" = {
enableACME = true;
forceSSL = true;
acmeFallbackHost = "storage1.banditlair.com";
locations."= /.well-known/matrix/server".extraConfig =
let
@ -25,10 +26,10 @@ in
# the client-server and server-server port for simplicity
server = { "m.server" = "${fqdn}:443"; };
in
''
add_header Content-Type application/json;
return 200 '${builtins.toJSON server}';
'';
''
add_header Content-Type application/json;
return 200 '${builtins.toJSON server}';
'';
locations."= /.well-known/matrix/client".extraConfig =
let
client = {
@ -37,11 +38,11 @@ in
};
# ACAO required to allow element-web on any URL to request this json file
in
''
add_header Content-Type application/json;
add_header Access-Control-Allow-Origin *;
return 200 '${builtins.toJSON client}';
'';
''
add_header Content-Type application/json;
add_header Access-Control-Allow-Origin *;
return 200 '${builtins.toJSON client}';
'';
};
# Reverse proxy for Matrix client-server and server-server communication