crony/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use tuwunel insteas of conduit.

Browse source
This commit is contained in:
CronyAkatsuki 2026-02-10 21:10:25 +01:00
parent 377e610395
commit 5cd910ecaf
2 changed files with 31 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/servers/per-server/thor/secrets.nix
View file

@ -10,6 +10,11 @@
conduit = {
file = "${inputs.secrets}/secrets/conduit.age";
};
tuwunel = {
file = "${inputs.secrets}/secrets/tuwunel.age";
owner = "tuwunel";
group = "tuwunel";
};
lemmy-env = {
file = "${inputs.secrets}/secrets/lemmy.env.age";
};

37
modules/servers/per-server/thor/services/conduit.nix
View file

@ -1,17 +1,32 @@
{config, ...}: {
services.matrix-conduit = {
services.matrix-tuwunel = {
enable = true;
settings = {
global = {
server_name = "cronyakatsuki.xyz";
database_backend = "rocksdb";
allow_registration = true;
allow_check_for_updates = true;
};
settings.global = {
server_name = "cronyakatsuki.xyz";
allow_registration = true;
registration_token_file = config.age.secrets.tuwunel.path;
};
};
# systemd.services.conduit.serviceConfig = {
# EnvironmentFile = ["${config.age.secrets.conduit.path}"];
# };
services.traefik.dynamicConfigOptions.http = {
services.tuwunel.loadBalancer.servers = [
{
url = "http://localhost:6167";
}
];
routers.tuwunel = {
rule = "Host(`matrix.cronyakatsuki.xyz`)";
tls = {
certResolver = "porkbun";
};
service = "tuwunel";
entrypoints = "websecure";
};
};
services.restic.backups = {
local.paths = ["/var/lib/matrix-tuwunel"];
server.paths = ["/var/lib/matrix-tuwunel"];
};
}