Henry-Hiles/nixos
Watch
1
1
Fork
You've already forked nixos
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

change c10y config

Browse source
This commit is contained in:
Henry Hiles 2026-07-27 20:16:27 -04:00
commit f6783dd9e3
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
2 changed files with 55 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

11
clients/quadraticserver/matrix/continuwuity.nix
View file

@ -1,8 +1,17 @@
{ { lib, pkgs, ... }: {
systemd.services.continuwuity.serviceConfig = {
MemoryMax = "5.5G";
MemorySwapMax = "4.5G";
TimeoutStartSec = "10m";
Restart = lib.mkForce "always";
ExecStartPost = "/bin/sh -c 'until ${lib.getExe pkgs.curl} -s -f https://matrix.federated.nexus/.well-known/matrix/client; do sleep 1; done'";
};
quad.matrix = rec { quad.matrix = rec {
enable = true; enable = true;
domain = "federated.nexus"; domain = "federated.nexus";
settings = { settings = {
cache_capacity_modifier = 0.8;
admins_list = [ admins_list = [
"@nexusbot:federated.nexus" "@nexusbot:federated.nexus"
"@quadradical:federated.nexus" "@quadradical:federated.nexus"

102
modules/server/continuwuity.nix
View file

@ -18,72 +18,60 @@
}; };
}; };
config = { config.services =
systemd.services.continuwuity.serviceConfig = { let
MemoryHigh = "5G"; subdomain = "matrix.${config.quad.matrix.domain}";
MemoryMax = "5.5G"; socket = "/var/run/continuwuity/continuwuity.sock";
MemorySwapMax = "4.5G"; in
TimeoutStartSec = "10m"; {
Restart = lib.mkForce "always"; matrix-continuwuity = {
ExecStartPost = "/bin/sh -c 'until ${lib.getExe pkgs.curl} -s -f https://matrix.federated.nexus/.well-known/matrix/client; do sleep 1; done'"; enable = config.quad.matrix.enable;
}; package = inputs.continuwuity.packages.${pkgs.stdenv.hostPlatform.system}.default;
services = group = "caddy";
let settings.global = lib.recursiveUpdate {
subdomain = "matrix.${config.quad.matrix.domain}"; server_name = config.quad.matrix.domain;
socket = "/var/run/continuwuity/continuwuity.sock"; unix_socket_path = socket;
in
{
matrix-continuwuity = {
enable = config.quad.matrix.enable;
package = inputs.continuwuity.packages.${pkgs.stdenv.hostPlatform.system}.default;
group = "caddy";
settings.global = lib.recursiveUpdate {
server_name = config.quad.matrix.domain;
unix_socket_path = socket;
new_user_displayname_suffix = ""; new_user_displayname_suffix = "";
default_room_version = "12"; default_room_version = "12";
forbidden_remote_server_names = [ forbidden_remote_server_names = [
"freetard\\.net$" # racism, zip bomb attempts "freetard\\.net$" # racism, zip bomb attempts
]; ];
ignore_messages_from_server_names = [ ]; ignore_messages_from_server_names = [ ];
allow_joining_broken_rooms = true; allow_joining_broken_rooms = true;
trusted_servers = [ trusted_servers = [
"starstruck.systems" "starstruck.systems"
"maunium.net" "maunium.net"
"codestorm.net" "codestorm.net"
"matrix.org" "matrix.org"
]; ];
startup_netburst = false; startup_netburst = false;
admins_from_room = false; admins_from_room = false;
cache_capacity_modifier = 0.8; url_preview_domain_explicit_allowlist = [ "*" ];
url_preview_max_spider_size = 2097152;
url_preview_domain_explicit_allowlist = [ "*" ]; max_request_size = 256000000;
url_preview_max_spider_size = 2097152;
max_request_size = 256000000; dns_cache_entries = 0;
dns_cache_entries = 0; allow_public_room_directory_over_federation = true;
lockdown_public_room_directory = true;
allow_public_room_directory_over_federation = true; allow_incoming_presence = false;
lockdown_public_room_directory = true; allow_outgoing_presence = false;
allow_local_presence = false;
allow_incoming_presence = false; well_known = {
allow_outgoing_presence = false; client = "https://${subdomain}";
allow_local_presence = false; server = "${subdomain}:443";
};
well_known = { } config.quad.matrix.settings;
client = "https://${subdomain}";
server = "${subdomain}:443";
};
} config.quad.matrix.settings;
};
caddy.virtualHosts."${subdomain}".extraConfig = "reverse_proxy unix/${socket}";
}; };
};
caddy.virtualHosts."${subdomain}".extraConfig = "reverse_proxy unix/${socket}";
};
} }