sail: Remove Matrix from CF

system/nixos/freshrss.nix

@@ -20,8 +20,7 @@
   };
 
   # Based on: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/nixos/modules/services/web-apps/freshrss.nix
-  services.nginx = {
-    virtualHosts."${secret.freshrss.virtualHost}" = {
+  services.nginx.virtualHosts."${secret.freshrss.virtualHost}" = {
     http3 = true;
 
     root = "${config.services.freshrss.package}/p";
@@ -48,5 +47,4 @@
       index = "index.php index.html index.htm";
     };
   };
-  };
 }

system/nixos/libreddit.nix

@@ -8,8 +8,7 @@
     port = 8002;
   };
 
-  services.nginx = {
-    virtualHosts."${secret.nginx.hostnames.libreddit}" = {
+  services.nginx.virtualHosts."${secret.nginx.hostnames.libreddit}" = {
     http3 = true;
 
     forceSSL = true;
@@ -21,5 +20,4 @@
       proxyPass = "http://127.0.0.1:8002";
     };
   };
-  };
 }

system/nixos/mastodon.nix

@@ -70,8 +70,7 @@ in
     extraEnvFiles = [ config.age.secrets.mastodon-extra-config.path ];
   };
 
-  services.nginx = {
-    virtualHosts."${web-domain}" = {
+  services.nginx.virtualHosts."${web-domain}" = {
     http3 = true;
 
     root = "${config.services.mastodon.package}/public/";
@@ -92,6 +91,7 @@ in
       recommendedProxySettings = true;
       proxyPass = "http://unix:/run/mastodon-web/web.socket";
       proxyWebsockets = true;
+
       extraConfig = ''
         proxy_force_ranges on;
       '';
@@ -101,12 +101,12 @@ in
       recommendedProxySettings = true;
       proxyPass = "http://unix:/run/mastodon-streaming/streaming.socket";
       proxyWebsockets = true;
+
       extraConfig = ''
         proxy_force_ranges on;
       '';
     };
   };
-  };
 
   users.groups.mastodon.members = [ config.services.nginx.user ];
 }

system/nixos/synapse.nix

@@ -88,4 +88,22 @@
   };
 
   networking.firewall.interfaces."enp7s0".allowedTCPPorts = [ 8008 ];
+
+  services.nginx.virtualHosts."matrix.kempkens.io" = {
+    http3 = true;
+
+    forceSSL = true;
+    useACMEHost = "kempkens.io";
+
+    locations."/" = {
+      recommendedProxySettings = true;
+      proxyPass = "http://127.0.0.1:8008";
+      proxyWebsockets = true;
+
+      extraConfig = ''
+        client_max_body_size 50m;
+        proxy_force_ranges on;
+      '';
+    };
+  };
 }