From b60c592cede45952edca006890bd776c0995e424 Mon Sep 17 00:00:00 2001
From: notohh <github@notohh.dev>
Date: Wed, 21 Jun 2023 18:31:03 -0400
Subject: [PATCH] sakura: init conduit

---
 hosts/sakura/services/conduit.nix | 15 +++++++++++++++
 hosts/sakura/services/default.nix |  1 +
 hosts/sakura/services/traefik.nix |  8 ++++++++
 3 files changed, 24 insertions(+)
 create mode 100644 hosts/sakura/services/conduit.nix

diff --git a/hosts/sakura/services/conduit.nix b/hosts/sakura/services/conduit.nix
new file mode 100644
index 0000000..c282135
--- /dev/null
+++ b/hosts/sakura/services/conduit.nix
@@ -0,0 +1,15 @@
+_: {
+  networking.firewall.allowedTCPPorts = [6167 8448];
+  services.matrix-conduit = {
+    enable = true;
+    settings.global = {
+      address = "0.0.0.0";
+      port = 6167;
+      server_name = "notohh.dev";
+      allow_registration = true;
+      allow_federation = true;
+      allow_encryption = true;
+      trusted_servers = ["matrix.org"];
+    };
+  };
+}
diff --git a/hosts/sakura/services/default.nix b/hosts/sakura/services/default.nix
index 5a454c2..f59c2f5 100644
--- a/hosts/sakura/services/default.nix
+++ b/hosts/sakura/services/default.nix
@@ -11,5 +11,6 @@
     ./hedgedoc.nix
     ./dashdot.nix
     ./grafana.nix
+    ./conduit.nix
   ];
 }
diff --git a/hosts/sakura/services/traefik.nix b/hosts/sakura/services/traefik.nix
index ab5e978..dcef5d7 100644
--- a/hosts/sakura/services/traefik.nix
+++ b/hosts/sakura/services/traefik.nix
@@ -104,6 +104,13 @@
             tls.domains = [{main = "*.notohh.dev";}];
             tls.certresolver = "production";
           };
+          conduit = {
+            rule = "Host(`artoria.notohh.dev`)";
+            entrypoints = ["websecure"];
+            service = "conduit";
+            tls.domains = [{main = "*.notohh.dev";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           authelia.loadBalancer.servers = [{url = "http://localhost:9091";}];
@@ -118,6 +125,7 @@
           woodpecker-server.loadBalancer.servers = [{url = "http://localhost:8200";}];
           atticd.loadBalancer.servers = [{url = "http://localhost:8100";}];
           hedgedoc.loadBalancer.servers = [{url = "http://localhost:3300";}];
+          conduit.loadBalancer.servers = [{url = "http://localhost:6167";}];
         };
       };
     };