Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: mautrix bridges

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2026-03-02 13:16:22 +01:00
parent 8d65b28de2
commit 7882b04089
2 changed files with 45 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

27
hosts/fw/modules/web/matrix.nix
View file

@ -207,6 +207,12 @@ in {
};
allow_guest_access = false;
# MSC4190: device management for appservices (required for encrypted bridges with MAS)
experimental_features = {
msc4190_enabled = true;
msc3202_device_masquerading = true;
};
};
};
@ -284,6 +290,18 @@ in {
locations."/_synapse/client".proxyPass = "http://[::1]:8008";
};
# Internal proxy for bridges: routes login/auth to MAS, everything else to Synapse.
# Bridges connect here instead of directly to Synapse, which no longer serves
# /_matrix/client/v3/login when MAS is enabled.
services.nginx.virtualHosts."matrix-internal" = {
listen = [{ addr = "127.0.0.1"; port = 8009; }];
locations."~ ^/_matrix/client/(r0|v3)/login$".proxyPass = "http://127.0.0.1:8081";
locations."~ ^/_matrix/client/(r0|v3)/logout$".proxyPass = "http://127.0.0.1:8081";
locations."~ ^/_matrix/client/(r0|v3)/refresh$".proxyPass = "http://127.0.0.1:8081";
locations."/_matrix".proxyPass = "http://[::1]:8008";
locations."/_synapse/client".proxyPass = "http://[::1]:8008";
};
#
# Mautrix bridges (using NixOS modules)
# Modules handle users, groups, registration files, Synapse integration,
@ -297,7 +315,7 @@ in {
environmentFile = config.sops.secrets.mautrix-whatsapp-env.path;
settings = {
homeserver = {
address = "http://[::1]:8008";
address = "http://127.0.0.1:8009";
domain = "cloonar.com";
};
bridge = {
@ -311,6 +329,7 @@ in {
default = true;
require = true;
pickle_key = "$MAUTRIX_WHATSAPP_PICKLE_KEY";
msc4190 = true;
};
};
};
@ -322,7 +341,7 @@ in {
environmentFile = config.sops.secrets.mautrix-signal-env.path;
settings = {
homeserver = {
address = "http://[::1]:8008";
address = "http://127.0.0.1:8009";
domain = "cloonar.com";
};
bridge = {
@ -336,6 +355,7 @@ in {
default = true;
require = true;
pickle_key = "$MAUTRIX_SIGNAL_PICKLE_KEY";
msc4190 = true;
};
matrix.sync_direct_chat_list = true;
};
@ -348,7 +368,7 @@ in {
environmentFile = config.sops.secrets.mautrix-discord-env.path;
settings = {
homeserver = {
address = "http://[::1]:8008";
address = "http://127.0.0.1:8009";
domain = "cloonar.com";
};
bridge = {
@ -368,6 +388,7 @@ in {
default = true;
require = true;
pickle_key = "$MAUTRIX_DISCORD_PICKLE_KEY";
msc4190 = true;
};
};
};