Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Switch back to Matrix to hell with it all

Browse source
This commit is contained in:
Bun 2025-03-17 03:55:42 -04:00
parent 5b14c780cd
commit a22358ca47
10 changed files with 160 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/system/services/server/socialserver/default.nix
View file

@ -2,8 +2,8 @@
{
imports = [
./mastodon
./matrix
./owncast
#./spacebar
];
options.system.socialserver.enable = lib.mkEnableOption "Enable social media like services";

46
modules/system/services/server/socialserver/matrix/coturn/default.nix Normal file
View file

@ -0,0 +1,46 @@
{ config, lib, ... }:
{
imports = [ ./nginx ];
config = lib.mkIf config.services.matrix-synapse.enable {
services = {
coturn = {
enable = true;
no-cli = true;
no-tcp-relay = true;
min-port = 49000;
max-port = 50000;
use-auth-secret = true;
static-auth-secret = config.secrets.coturnSecret;
realm = "turn.nixfox.ca";
cert = "/var/lib/acme/${config.services.coturn.realm}/fullchain.pem";
pkey = "/var/lib/acme/${config.services.coturn.realm}/key.pem";
};
# Enable coturn on Synapse
matrix-synapse.settings = {
turn_uris = [
"turn:${config.services.coturn.realm}:3478?transport=udp"
"turn:${config.services.coturn.realm}:3478?transport=tcp"
];
turn_shared_secret = config.secrets.coturnSecret;
turn_user_lifetime = "1h";
};
# Sync the IP to Cloudflare
cloudflare-dyndns.domains = [ config.services.coturn.realm ];
};
# Open coturn ports
networking.firewall = {
allowedUDPPorts = [
3478
5349
];
allowedUDPPortRanges = [{
from = config.services.coturn.min-port;
to = config.services.coturn.max-port;
}];
};
};
}

22
modules/system/services/server/socialserver/matrix/coturn/nginx/default.nix Normal file
View file

@ -0,0 +1,22 @@
{ config, lib, ... }:
{
config = lib.mkIf config.services.coturn.enable {
services.nginx.virtualHosts."turn.nixfox.ca" = {
enableACME = true;
forceSSL = true;
listen = [{
addr = "0.0.0.0";
port = 80;
ssl = false;
}];
locations."/".proxyPass = "http://127.0.0.1:1380";
};
security.acme.certs = {
"turn.nixfox.ca" = {
group = "turnserver";
postRun = "systemctl restart coturn.service";
};
};
};
}

8
modules/system/services/server/socialserver/matrix/default.nix Normal file
View file

@ -0,0 +1,8 @@
{ ... }:
{
imports = [
./coturn
./element
./synapse
];
}

21
modules/system/services/server/socialserver/matrix/element/default.nix Normal file
View file

@ -0,0 +1,21 @@
{ config, lib, ... }:
{
imports = [ ./nginx ];
config = lib.mkIf config.services.matrix-synapse.enable {
nixpkgs.config.element-web.conf = {
default_server_config."m.homeserver" = {
base_url = "https://matrix.nixfox.ca";
server_name = "matrix.nixfox.ca";
};
branding = {
auth_header_logo_url = "https://www.nixfox.ca/images/copyright/profile.png";
#welcome_background_url = "https://www.nixfox.ca/images/backgrounds/template-background.png";
};
embedded_pages.home_url = "https://www.nixfox.ca/";
disable_custom_urls = true;
disable_guests = true;
default_theme = "dark";
};
};
}

8
modules/system/services/server/socialserver/matrix/element/nginx/default.nix Normal file
View file

@ -0,0 +1,8 @@
{ config, lib, pkgs, ... }:
{
services.nginx.virtualHosts."chat.nixfox.ca" = lib.mkIf config.services.matrix-synapse.enable {
enableACME = true;
addSSL = true;
root = "${pkgs.element-web}";
};
}

41
modules/system/services/server/socialserver/matrix/synapse/default.nix Normal file
View file

@ -0,0 +1,41 @@
{ config, lib, ... }:
{
imports = [ ./nginx ];
config = lib.mkIf config.system.socialserver.enable {
services.matrix-synapse = {
enable = true;
settings = {
server_name = "nixfox.ca";
public_baseurl = "https://matrix.nixfox.ca";
suppress_key_server_warning = true;
# Email notifications about account status
email = {
notif_from = "NixFox Matrix <noreply@nixfox.ca>";
smtp_host = "mx.nixfox.ca";
smtp_user = "noreply@nixfox.ca";
smtp_pass = config.secrets.noreplyPassword;
enable_tls = true;
smtp_port = 587;
require_transport_security = true;
};
# Disable registration without email
registrations_require_3pid = [ "email" ];
# Set the type of database
database.name = "sqlite3";
# Allow account registration
enable_registration = true;
# General settings
max_upload_size = "60M";
burst_count = 15;
};
};
environment.persistence."/persist".directories = [ "/var/lib/matrix-synapse" ];
};
}

13
modules/system/services/server/socialserver/matrix/synapse/nginx/default.nix Normal file
View file

@ -0,0 +1,13 @@
{ config, lib, ... }:
{
services.nginx.virtualHosts."matrix.nixfox.ca" = lib.mkIf config.services.matrix-synapse.enable {
enableACME = true;
forceSSL = true;
locations = {
"/".extraConfig = ''return 403;'';
"/client".proxyPass = "http://127.0.0.1:8008";
"/_matrix".proxyPass = "http://127.0.0.1:8008";
"/_synapse/client".proxyPass = "http://127.0.0.1:8008";
};
};
}

25
modules/system/services/server/socialserver/spacebar/default.nix
View file

@ -1,25 +0,0 @@
{ config, lib, pkgs, spacebar, ... }:
{
imports = [
./nginx
./user
];
config = lib.mkIf config.system.socialserver.enable {
systemd.services.spacebar-server = {
enable = true;
description = "Spacebar Chat Server";
documentation = [ "https://docs.spacebar.chat/" ];
path = [ spacebar.packages.${pkgs.system}.default ];
wantedBy = [ "multi-user.target" ];
after = [ "network.target" ];
serviceConfig = {
WorkingDirectory = "/var/lib/spacebar";
ExecStart = "start-bundle";
Restart = "always";
User = "spacebar";
};
};
environment.persistence."/persist".directories = [ config.systemd.services.spacebar-server.serviceConfig.WorkingDirectory ];
};
}

11
modules/system/services/server/socialserver/spacebar/user/default.nix
View file

@ -1,11 +0,0 @@
{ config, lib, ... }:
{
users = lib.mkIf config.systemd.services.spacebar-server.enable {
users.spacebar = {
group = "spacebar";
isSystemUser = true;
uid = 138;
};
groups.spacebar = {};
};
}