changes

hosts/fw.cloonar.com/modules/web/default.nix

@@ -1,10 +1,18 @@
-{ lib, nixpkgs, pkgs, ... }: let
+{ lib, pkgs, config, ... }: let
   hostname = "web-02";
   json = pkgs.formats.json { };
   impermanence = builtins.fetchTarball "https://github.com/nix-community/impermanence/archive/master.tar.gz";
 in {
   microvm.vms = {
     web = {
+      pkgs = import pkgs.path {
+        config = {
+          permittedInsecurePackages = [
+            # needed for matrix
+            "olm-3.2.16"
+          ];
+        };
+      };
       config = {
         microvm = {
           mem = 4096;
@@ -47,6 +55,7 @@ in {
 
           # ./zammad.nix
           ./proxies.nix
+          ./matrix.nix
         ];
 
         time.timeZone = "Europe/Vienna";
@@ -93,6 +102,14 @@ in {
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIRQuPqH5fdX3KEw7DXzWEdO3AlUn1oSmtJtHB71ICoH Generated By Termius"
         ];
 
+        services.nginx = {
+          enable = true;
+          recommendedTlsSettings = true;
+          recommendedOptimisation = true;
+          recommendedGzipSettings = true;
+          recommendedProxySettings = true;
+        };
+
         # backups
         # borgbackup.repo = "u149513-sub2@u149513-sub2.your-backup.de:borg";