conduit take II

hosts/servers/alexandria/default.nix

@@ -7,6 +7,7 @@
     ./variables.nix
     ./services.nix
     ./security.nix
+    ./matrix.nix
     ./users.nix
   ];
 }

hosts/servers/alexandria/matrix.nix

@@ -0,0 +1,39 @@
+{ specialArgs, inputs, config, pkgs, lib, ... }:
+
+{
+  services.matrix-conduit = {
+    enable = true;
+    extraEnvironment = {
+      RUST_MIN_STACK = "16777216";
+    };
+    package = pkgs.unstable.matrix-conduit;
+    settings.global = {
+      server_name = "baduhai.me";
+      address = "127.0.0.1";
+      port = 6167;
+      max_request_size = 20000000;
+      allow_registration = true;
+      allow_encryption = true;
+      allow_federation = false;
+    };
+  };
+
+  services.nginx.virtualHosts."matrix.baduhai.me" = {
+    useACMEHost = "baduhai.me";
+    forceSSL = true;
+    kTLS = true;
+    locations."/_matrix/".proxyPass = "http://127.0.0.1:6167$request_uri";
+    locations."= /.well-known/matrix/client" = {
+      alias = pkgs.writeText "matrix-wk-client" ''
+        { "m.homeserver": { "base_url": "https://matrix.baduhai.me" } }
+      '';
+      extraConfig = "add_header Access-Control-Allow-Origin *;";
+    };
+    locations."= /.well-known/matrix/server" = {
+      alias = pkgs.writeText "matrix-wk-server" ''
+        { "m.server": "matrix.baduhai.me:443" }
+      '';
+      extraConfig = "add_header Access-Control-Allow-Origin *;";
+    };
+  };
+}