From 5fb9453d3e900c5b907ba67d9267f06764fadbbd Mon Sep 17 00:00:00 2001
From: sefidel <contact@sefidel.net>
Date: Tue, 4 Apr 2023 22:19:22 +0900
Subject: feat(services/schildichat-web): init

---
 modules/services/schildichat-web.nix | 47 ++++++++++++++++++++++++++++++++++++
 systems/cobalt/default.nix           | 11 +++++++++
 2 files changed, 58 insertions(+)
 create mode 100644 modules/services/schildichat-web.nix

diff --git a/modules/services/schildichat-web.nix b/modules/services/schildichat-web.nix
new file mode 100644
index 0000000..8a8ede5
--- /dev/null
+++ b/modules/services/schildichat-web.nix
@@ -0,0 +1,47 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+let
+  cfg = config.modules.services.schildichat-web;
+in
+{
+  options.modules.services.schildichat-web = {
+    enable = mkEnableOption "schildichat-web";
+    package = mkOption { type = types.package; default = pkgs.schildichat-web; };
+    hostName = mkOption { type = types.str; default = config.networking.hostName; };
+    matrix = {
+      baseUrl = mkOption { type = types.str; default = "https://matrix.${config.networking.hostName}"; };
+      serverName = mkOption { type = types.str; default = config.networking.hostName; };
+    };
+    tls.acmeHost = mkOption { type = types.str; default = cfg.hostName; };
+    jitsi.domain = mkOption { type = types.str; default = "jitsi.${cfg.hostName}"; };
+  };
+
+  config = mkIf cfg.enable {
+    services.nginx.virtualHosts.${cfg.hostName} = {
+      useACMEHost = cfg.tls.acmeHost;
+      forceSSL = true;
+
+      root = cfg.package.override {
+        conf = {
+          default_server_config = {
+            "m.homeserver" = {
+              "base_url" = cfg.matrix.baseUrl;
+              "server_name" = cfg.matrix.serverName;
+            };
+            "m.identity_server" = {
+              "base_url" = "https://vector.im";
+            };
+          };
+          showLabsSettings = true;
+        } // optionalAttrs (cfg.jitsi.domain != null) {
+          jitsi.preferredDomain = cfg.jitsi.domain;
+        };
+      };
+
+      locations."~ \\.(js|css|woff|woff2?|png|jpe?g|svg)$".extraConfig = ''
+        add_header Cache-Control "public, max-age=14400, must-revalidate";
+      '';
+    };
+  };
+}
diff --git a/systems/cobalt/default.nix b/systems/cobalt/default.nix
index f369fec..d9a279b 100644
--- a/systems/cobalt/default.nix
+++ b/systems/cobalt/default.nix
@@ -174,6 +174,7 @@ in
             "bouncer"
             "meet"
             "chat"
+            "schildi"
             "turn"
             "status"
             "mail"
@@ -246,6 +247,16 @@ in
       tls.acmeHost = "exotic.sh";
       jitsi.domain = "meet.exotic.sh";
     };
+    services.schildichat-web = {
+      enable = true;
+      hostName = "schildi.exotic.sh";
+      matrix = {
+        baseUrl = config.modules.services.element-web.matrix.baseUrl;
+        serverName = config.modules.services.element-web.matrix.serverName;
+      };
+      tls.acmeHost = config.modules.services.element-web.tls.acmeHost;
+      jitsi.domain = config.modules.services.element-web.jitsi.domain;
+    };
     services.akkoma = {
       enable = true;
       domain = "exotic.sh";
-- 
cgit 1.4.1