atridad/haschel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

This time for realzies
All checks were successful
Deploy NixOS / deploy (push) Successful in 33s
Details

Browse Source
This commit is contained in:
Atridad Lahiji
2026-02-13 10:39:38 -07:00
parent 4df3457aa8
commit 1ef2816a9c
2 changed files with 11 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
modules/nginx.nix
View File

@@ -16,7 +16,7 @@ let
"org.matrix.msc4143.rtc_foci" = [
{
type = "livekit";
livekit_service_url = "https://${matrixRtcDomain}";
livekit_service_url = "https://${matrixDomain}/livekit/jwt";
}
];
};
@@ -389,43 +389,26 @@ in
client_max_body_size 100M;
'';
};
locations."^~ /livekit/jwt/" = {
priority = 400;
proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}/";
};
};
"matrixrtc.atri.dad" = {
enableACME = true;
forceSSL = true;
# lk-jwt-service (handles its own CORS)
locations."/sfu/get" = {
proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
'';
};
locations."/healthz" = {
proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
'';
};
# livekit
locations."/" = {
proxyPass = "http://[::1]:${toString config.services.livekit.settings.port}";
proxyWebsockets = true;
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 300;
proxy_send_timeout 300;
proxy_send_timeout 120;
proxy_read_timeout 120;
proxy_buffering off;
proxy_set_header Accept-Encoding gzip;
'';
};
};