matrix-synapse: Move to marabethia

machines/marabethia/default.nix

@@ -84,6 +84,7 @@
     services = {
       git.enable = true;
       mail.enable = true;
+      matrix.enable = true;
       nextcloud.enable = true;
       nginx.hosts = [
         {
@@ -109,6 +110,36 @@
           options.locations."/".return = "307 https://www.vanpetegem.be$request_uri";
         }
         { fqdn = "www.vanpetegem.be"; }
+        {
+          fqdn = "vanpetegem.me";
+          options = {
+            locations = {
+              "/_matrix" = {
+                proxyPass = "http://127.0.0.1:8448";
+                extraConfig = ''
+                  proxy_read_timeout 600;
+                  client_max_body_size 10M;
+                  proxy_set_header X-Forwarded-Ssl on;
+                '';
+              };
+              "/.well-known/matrix" = {
+                root = pkgs.runCommand "well-known-matrix" { } ''
+                  mkdir -p $out/.well-known/matrix
+                  echo '{"m.server":"matrix.vanpetegem.me:443"}' > $out/.well-known/matrix/server
+                  echo '{"m.homeserver":{"base_url":"https://matrix.vanpetegem.me"}}' > $out/.well-known/matrix/client
+                '';
+                extraConfig = ''
+                  default_type application/json;
+                  add_header 'access-control-allow-origin' '*' always;
+                  add_header 'access-control-allow-methods' 'GET, HEAD, POST, PUT, DELETE, OPTIONS' always;
+                  add_header 'access-control-allow-headers' 'X-Requested-With, Content-Type, Authorization, Date' always;
+                '';
+                priority = 1;
+              };
+              "/".return = "307 https://www.vanpetegem.me$request_uri";
+            };
+          };
+        }
         { fqdn = "www.vanpetegem.me"; }
       ];
     };

machines/marabethia/hardware.nix

@@ -69,6 +69,10 @@
       device = "zroot/safe/services/mail";
       fsType = "zfs";
     };
+    "/var/lib/matrix-synapse" = {
+      device = "zroot/safe/services/matrix-synapse";
+      fsType = "zfs";
+    };
     "/var/lib/nextcloud" = {
       device = "zroot/safe/services/nextcloud";
       fsType = "zfs";