cluster/containers/conduit.nix

{ nglib, nixpkgs }:
nglib.makeSystem {
  system = "x86_64-linux";
  name = "nixng-gitea";
  inherit nixpkgs;
  config = ({ pkgs, ... }:
    {
      dumb-init = {
        enable = true;
        type.services = { };
      };

      init.services.conduit = {
        enabled = true;
        shutdownOnExit = true;
        script =
          let
            conduitConfig = (pkgs.formats.toml {}).generate "conduit.toml"
              {
                global =
                  {
                    # The server_name is the pretty name of this server. It is used as a suffix for user
                    # and room ids. Examples: matrix.org, conduit.rs

                    # The Conduit server needs all /_matrix/ requests to be reachable at
                    # https://your.server.name/ on port 443 (client-server) and 8448 (federation).

                    # If that's not possible for you, you can create /.well-known files to redirect
                    # requests. See
                    # https://matrix.org/docs/spec/client_server/latest#get-well-known-matrix-client
                    # and
                    # https://matrix.org/docs/spec/server_server/r0.1.4#get-well-known-matrix-server
                    # for more information

                    # YOU NEED TO EDIT THIS
                    server_name = "matrix.redalder.org";

                    # This is the only directory where Conduit will save its data
                    database_path = "/var/lib/matrix-conduit/";
                    database_backend = "rocksdb";

                    # The port Conduit will be running on. You need to set up a reverse proxy in
                    # your web server (e.g. apache or nginx), so all requests to /_matrix on port
                    # 443 and 8448 will be forwarded to the Conduit instance running on this port
                    port = 6167;

                    # Max size for uploads
                    max_request_size = 20000000; # in bytes

                    # Enables registration. If set to false, no users can register on this server.
                    allow_registration = true;

                    allow_federation = true;

                    trusted_servers = ["matrix.org"];

                    # How many requests Conduit sends to other servers at the same time
                    #max_concurrent_requests = 100
                    #log = "info,state_res=warn,rocket=off,_=off,sled=off"

                    address = "0.0.0.0";
                  };
              };
          in
            pkgs.writeShellScript "conduit"
              ''
                CONDUIT_CONFIG=${conduitConfig} ${pkgs.matrix-conduit}/bin/conduit
              '';
      };
    });
}