root/the_prg_server_configuration_old
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enhance configuration for Matrix to enable federation

Browse source
This commit is contained in:
Root User 2026-02-10 00:58:40 +01:00
parent a027b99446
commit 34abb21e0b
Signed by: root
GPG key ID: 087F0A95E5766D72
2 changed files with 29 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix-system-configs/modules/system/teamspeak.nix
View file

@ -61,7 +61,7 @@
settings.global = { settings.global = {
allow_registration = true; allow_registration = true;
# You will need this token when creating your first account. # You will need this token when creating your first account.
registration_token = "testtoken1234"; #registration_token = "testtoken1234";
# server_name = yourDomainName; # server_name = yourDomainName;
port = 12244; port = 12244;
# Bind to all interfaces so Traefik on the network can reach Conduit. # Bind to all interfaces so Traefik on the network can reach Conduit.

44
nix-system-configs/modules/system/traefik.nix
View file

@ -67,6 +67,10 @@
]; ];
}; };
}; };
# Federation entrypoint: external TLS on 8448
federation = {
address = ":8448";
};
# TeamSpeak entry points # TeamSpeak entry points
teamspeak-voice = { teamspeak-voice = {
address = ":9987/udp"; address = ":9987/udp";
@ -100,7 +104,13 @@
entryPoints = ["websecure"]; entryPoints = ["websecure"];
tls = {}; tls = {};
}; };
# Matrix HTTP router for client requests (Element etc.)
matrix = {
rule = "Host(`lgbtq.prg-radio.org`)";
service = "matrix";
entryPoints = ["websecure"];
tls = {};
};
wavelog = { wavelog = {
rule = "Host(`wavelog.prg-radio.org`)"; rule = "Host(`wavelog.prg-radio.org`)";
service = "wavelog"; service = "wavelog";
@ -114,13 +124,6 @@
entryPoints = ["websecure"]; entryPoints = ["websecure"];
tls = {}; tls = {};
}; };
matrix = {
rule = "Host(`lgbtq.prg-radio.org`)";
service = "matrix";
entryPoints = ["websecure"];
tls = {};
};
}; };
http.services = { http.services = {
forgejo.loadBalancer = { forgejo.loadBalancer = {
@ -128,7 +131,11 @@
{url = "http://10.1.1.4:3000";} {url = "http://10.1.1.4:3000";}
]; ];
}; };
matrix.loadBalancer = {
servers = [
{url = "http://10.1.1.248:12244";}
];
};
wavelog.loadBalancer = { wavelog.loadBalancer = {
servers = [ servers = [
{url = "http://10.1.1.249:8086";} {url = "http://10.1.1.249:8086";}
@ -140,12 +147,6 @@
{url = "http://10.1.1.249:8087";} {url = "http://10.1.1.249:8087";}
]; ];
}; };
matrix.loadBalancer = {
servers = [
{ url = "http://10.1.1.248:12244"; }
];
};
}; };
# TCP routing for TeamSpeak # TCP routing for TeamSpeak
@ -160,6 +161,12 @@
service = "teamspeak-data"; service = "teamspeak-data";
entryPoints = ["teamspeak-data"]; entryPoints = ["teamspeak-data"];
}; };
# Federation TCP router: incoming on :8448 -> Conduit backend
matrix-federation = {
rule = "HostSNI(`*`)";
service = "matrix-federation";
entryPoints = ["federation"];
};
}; };
tcp.services = { tcp.services = {
@ -173,6 +180,11 @@
{address = "10.1.1.248:30033";} {address = "10.1.1.248:30033";}
]; ];
}; };
matrix-federation.loadBalancer = {
servers = [
{address = "10.1.1.248:12244";}
];
};
}; };
# UDP routing for TeamSpeak voice # UDP routing for TeamSpeak voice
@ -213,7 +225,7 @@
wants = ["acme-finished-prg-radio.org.target"]; wants = ["acme-finished-prg-radio.org.target"];
}; };
networking.firewall.allowedTCPPorts = [80 443 10022 30033]; networking.firewall.allowedTCPPorts = [80 443 10022 30033 8448];
networking.firewall.allowedUDPPorts = [80 443 9987]; networking.firewall.allowedUDPPorts = [80 443 9987];
system.stateVersion = "25.11"; system.stateVersion = "25.11";