fi/nix-infra
1
2
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity

Put matrix federation behind reverse proxy

Browse source
This commit is contained in:
fi 2026-04-07 21:32:12 +02:00
commit fe86c128ed
Signed by: fi
SSH key fingerprint: SHA256:dgX1HRsK+8F1OzYvKfv1VLhMJac/Iv/rsjixuV94+dA
4 changed files with 30 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/hosts/valkyrie/configuration.nix
View file

@ -7,7 +7,7 @@
nftables.enable = true;
firewall = {
enable = true;
allowedTCPPorts = [ 80 443 ];
allowedTCPPorts = [ 80 443 8448 ];
allowedUDPPorts = [ 51820 51821 51822 51824 51827 51828 51829 51830 ];
};
wireguard = {

5
config/hosts/valkyrie/nginx.nix
View file

@ -58,6 +58,11 @@
ssl_preread on;
proxy_protocol on;
}
server {
listen [::]:8448;
proxy_pass 10.202.41.112:8448; # matrix federation port
proxy_protocol on;
}
'';
};
}