Add matrix (tuwunel) to nimbus

modules/nixos/matrix.nix

@@ -0,0 +1,52 @@
+{ config, ... }:
+{
+  age.secrets."matrix-registration-token" = {
+    file = ../secrets/matrix-registration-token.age;
+    mode = "400";
+    owner = "tuwunel";
+  };
+
+  services.matrix-tuwunel = {
+    enable = true;
+    settings = {
+      global = {
+        server_name = "jankremer.de";
+        allow_registration = true;
+        registration_token_file = config.age.secrets.matrix-registration-token.path;
+        # trusted_servers = [ "matrix.org" ];
+      };
+    };
+  };
+
+  services.caddy = {
+    enable = true;
+    ## Matrix federation
+    virtualHosts = {
+      "jankremer.de:8448" = {
+        extraConfig = ''
+          reverse_proxy localhost:6167
+        '';
+      };
+      "jankremer.de" = {
+        extraConfig = ''
+          handle /_matrix/* {
+            reverse_proxy localhost:6167
+          }
+
+          handle /.well-known/matrix/server {
+            respond `{"m.server": "jankremer.de:443"}` 200 {
+              header Content-Type application/json
+            }
+          }
+
+          handle /.well-known/matrix/client {
+            respond `{"m.homeserver": {"base_url": "https://jankremer.de"}}` 200 {
+              header Content-Type application/json
+              header Access-Control-Allow-Origin *
+            }
+          }
+        '';
+      };
+    };
+  };
+}