daniel/dotfiles
1
0
Fork 0
Code Activity Actions

synapse: Expose 8443

Browse source
This commit is contained in:
Daniel Kempkens 2023-03-06 19:05:44 +01:00
parent 0bc2169913
commit 0145e37a75
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
system/nixos/synapse.nix
View file

@ -87,15 +87,24 @@
extraConfigFiles = [ config.age.secrets.synapse-extra-config.path ]; extraConfigFiles = [ config.age.secrets.synapse-extra-config.path ];
}; };
networking.firewall.interfaces."enp7s0".allowedTCPPorts = [ 8008 ]; networking.firewall.interfaces."enp7s0".allowedTCPPorts = [ 8008 8443 ];
services.nginx.virtualHosts."matrix.kempkens.io" = { services.nginx.virtualHosts."matrix.kempkens.io" = {
listen = [
{ addr = "0.0.0.0"; port = 80; }
{ addr = "[::0]"; port = 80; }
{ addr = "0.0.0.0"; port = 443; ssl = true; }
{ addr = "[::0]"; port = 443; ssl = true; }
{ addr = "0.0.0.0"; port = 8443; ssl = true; }
{ addr = "[::0]"; port = 8443; ssl = true; }
];
http3 = true; http3 = true;
forceSSL = true; forceSSL = true;
useACMEHost = "kempkens.io"; useACMEHost = "kempkens.io";
locations."/" = { locations."~ ^(/_matrix|/_synapse/client)" = {
recommendedProxySettings = true; recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:8008"; proxyPass = "http://127.0.0.1:8008";
proxyWebsockets = true; proxyWebsockets = true;