crony/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use tuwunel insteas of conduit.

Browse source
This commit is contained in:
CronyAkatsuki 2026-02-10 21:10:25 +01:00
parent 377e610395
commit 5cd910ecaf
2 changed files with 31 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/servers/per-server/thor/secrets.nix
View file

@ -10,6 +10,11 @@
conduit = { conduit = {
file = "${inputs.secrets}/secrets/conduit.age"; file = "${inputs.secrets}/secrets/conduit.age";
}; };
tuwunel = {
file = "${inputs.secrets}/secrets/tuwunel.age";
owner = "tuwunel";
group = "tuwunel";
};
lemmy-env = { lemmy-env = {
file = "${inputs.secrets}/secrets/lemmy.env.age"; file = "${inputs.secrets}/secrets/lemmy.env.age";
}; };

33
modules/servers/per-server/thor/services/conduit.nix
View file

@ -1,17 +1,32 @@
{config, ...}: { {config, ...}: {
services.matrix-conduit = { services.matrix-tuwunel = {
enable = true; enable = true;
settings = { settings.global = {
global = {
server_name = "cronyakatsuki.xyz"; server_name = "cronyakatsuki.xyz";
database_backend = "rocksdb";
allow_registration = true; allow_registration = true;
allow_check_for_updates = true; registration_token_file = config.age.secrets.tuwunel.path;
};
}; };
}; };
# systemd.services.conduit.serviceConfig = { services.traefik.dynamicConfigOptions.http = {
# EnvironmentFile = ["${config.age.secrets.conduit.path}"]; services.tuwunel.loadBalancer.servers = [
# }; {
url = "http://localhost:6167";
}
];
routers.tuwunel = {
rule = "Host(`matrix.cronyakatsuki.xyz`)";
tls = {
certResolver = "porkbun";
};
service = "tuwunel";
entrypoints = "websecure";
};
};
services.restic.backups = {
local.paths = ["/var/lib/matrix-tuwunel"];
server.paths = ["/var/lib/matrix-tuwunel"];
};
} }