feat(thor): add conduit, matrix server.

modules/servers/thor/conduit.nix

@@ -0,0 +1,34 @@
+{config, ...}: {
+  services.matrix-conduit = {
+    enable = true;
+    settings = {
+      global = {
+        server_name = "cronyakatsuki.xyz";
+        database_backend = "rocksdb";
+        allow_registration = true;
+        allow_check_for_updates = true;
+      };
+    };
+  };
+
+  systemd.services.conduit.serviceConfig = {
+    EnvironmentFile = ["${config.age.secrets.conduit.path}"];
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.conduit.loadBalancer.servers = [
+      {
+        url = "http://localhost:6167";
+      }
+    ];
+
+    routers.conduit = {
+      rule = "Host(`matrix.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "conduit";
+      entrypoints = "websecure";
+    };
+  };
+}

modules/servers/thor/default.nix

@@ -4,5 +4,6 @@
     ./forgejo.nix
     ./secrets.nix
     ./plausible.nix
+    ./conduit.nix
   ];
 }

modules/servers/thor/secrets.nix

@@ -7,6 +7,9 @@
       plausible = {
         file = ../../../secrets/plausible.age;
       };
+      conduit = {
+        file = ../../../secrets/conduit.age;
+      };
     };
   };
 }

secrets/secrets.nix

@@ -22,4 +22,5 @@ in {
   "navidrome.age".publicKeys = systems ++ users;
   "forgejo-db.age".publicKeys = systems ++ users;
   "plausible.age".publicKeys = systems ++ users;
+  "conduit.age".publicKeys = systems ++ users;
 }