1
0
Fork 0

Disable unnecessary synapse endpoint.

This commit is contained in:
Malte Brandy 2020-05-17 12:54:12 +02:00
parent 211da19fe6
commit 257dd1a0df
No known key found for this signature in database
GPG key ID: 226A2D41EF5378C9

View file

@ -1,10 +1,6 @@
{ pkgs, config, ... }:
let
hostName = "matrix.maralorn.de";
inherit (config.m-0) hosts;
let hostName = "matrix.maralorn.de";
in {
networking.firewall.allowedTCPPorts = [ 8448 ];
services = {
nginx = {
enable = true;
@ -82,24 +78,13 @@ in {
cp_max = 10;
};
report_stats = true;
tls_certificate_path = "/var/lib/acme/${hostName}/fullchain.pem";
tls_private_key_path = "/var/lib/acme/${hostName}/key.pem";
listeners = [
{
type = "metrics";
port = 9148;
bind_address = "127.0.0.1";
bind_address = "::1";
resources = [ ];
}
{
port = 8448;
bind_address = "::";
resources = [{
compress = false;
names = [ "federation" ];
}];
x_forwarded = false;
}
{
port = 8008;
bind_address = "::1";
@ -124,7 +109,7 @@ in {
group = "matrix-synapse";
allowKeysForGroup = true;
postRun =
"systemctl reload nginx.service; systemctl restart matrix-synapse.service";
"systemctl reload nginx.service; systemctl restart matrix-synapse.service;";
};
};