2024-10-03 16:26:21 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
[Unit]
|
|
|
|
|
Description=Conduwuit (matrix)
|
|
|
|
|
Wants=network-online.target
|
2024-10-20 18:03:34 +01:00
|
|
|
Wants=traefik.service
|
2024-10-03 16:26:21 +01:00
|
|
|
After=network-online.target
|
|
|
|
|
Documentation=https://conduwuit.puppyirl.gay/
|
|
|
|
|
|
|
|
|
|
[Container]
|
|
|
|
|
ContainerName=conduwuit
|
|
|
|
|
NoNewPrivileges=true
|
2024-11-20 01:16:17 +00:00
|
|
|
Image=ghcr.io/girlbossceo/conduwuit:main
|
2024-10-03 16:26:21 +01:00
|
|
|
ReadOnly=true
|
|
|
|
|
Volume=/var/opt/conduwuit:/var/lib/conduwuit:z,U
|
|
|
|
|
AutoUpdate=registry
|
2024-10-05 01:31:28 +01:00
|
|
|
# Network=web.network
|
2024-10-03 16:26:21 +01:00
|
|
|
# conduwuit uses quite a few file descriptors, and on some systems it defaults to 1024
|
|
|
|
|
Ulimit=nofile=1048567:1048567
|
|
|
|
|
|
|
|
|
|
Label="traefik.enable=true"
|
|
|
|
|
Label="traefik.http.routers.conduwuit.rule=(Host(`matrix.ellis.link`) || (Host(`ellis.link`) && PathPrefix(`/.well-known/matrix`)))"
|
|
|
|
|
Label="traefik.http.services.conduwuit.loadbalancer.server.port=6167"
|
|
|
|
|
|
2024-10-19 12:31:41 +01:00
|
|
|
Label="traefik.http.routers.conduwuit.entrypoints=https,matrix"
|
2024-10-03 16:26:21 +01:00
|
|
|
|
|
|
|
|
Label="traefik.http.routers.conduwuit.middlewares=default@file"
|
|
|
|
|
|
|
|
|
|
Label="homepage.group=Public"
|
|
|
|
|
Label="homepage.name=Conduwuit"
|
2024-10-09 03:06:13 +01:00
|
|
|
Label="homepage.href=https://element.ellis.link/"
|
2024-10-04 18:24:39 +01:00
|
|
|
# https://github.com/girlbossceo/conduwuit/blob/032b199129f8648a77bde285f755a78e9ec349a7/src/api/client/unversioned.rs#L142
|
|
|
|
|
# Endpoint provided by sliding sync proxy used by some clients such as Element Web as a non-standard health check.
|
|
|
|
|
Label="homepage.siteMonitor=https://matrix.ellis.link/client/server.json"
|
|
|
|
|
Label="homepage.description=Matrix homeserver"
|
2024-11-20 17:49:26 +00:00
|
|
|
Label=kuma.__monitor=''
|
2024-10-03 16:26:21 +01:00
|
|
|
|
|
|
|
|
Environment="CONDUWUIT_SERVER_NAME=ellis.link"
|
|
|
|
|
|
|
|
|
|
Environment="CONDUWUIT_DATABASE_PATH=/var/lib/conduwuit"
|
|
|
|
|
Environment="CONDUWUIT_DATABASE_BACKEND=rocksdb"
|
|
|
|
|
# should match the loadbalancer traefik label
|
|
|
|
|
Environment="CONDUWUIT_PORT=6167"
|
|
|
|
|
# in bytes, ~20 MB
|
|
|
|
|
Environment="CONDUWUIT_MAX_REQUEST_SIZE=20000000"
|
2024-11-21 00:20:03 +00:00
|
|
|
|
2024-11-19 20:05:52 +00:00
|
|
|
Environment="CONDUWUIT_ALLOW_REGISTRATION=true"
|
|
|
|
|
Environment="CONDUWUIT_REGISTRATION_TOKEN=mousiness-magical-swung-atlantic"
|
2024-10-03 16:26:21 +01:00
|
|
|
Environment="CONDUWUIT_ALLOW_FEDERATION=true"
|
2024-11-13 15:34:04 +00:00
|
|
|
Environment="CONDUWUIT_ALLOW_PUBLIC_ROOM_DIRECTORY_OVER_FEDERATION=true"
|
2024-11-21 00:20:03 +00:00
|
|
|
# Work around conduwuit sync polling bug
|
|
|
|
|
Environment="CONDUWUIT_ALLOW_INCOMING_PRESENCE=false"
|
|
|
|
|
|
|
|
|
|
|
2024-11-19 16:27:59 +00:00
|
|
|
Environment="CONDUWUIT_TRUSTED_SERVERS=[\"matrix.org\", \"matrix.pissing.dev\", \"matrix.ellis.link\"]"
|
2024-10-04 18:24:39 +01:00
|
|
|
Environment="CONDUWUIT_LOG=info,hickory_proto::xfer::dns_exchange=error"
|
2024-10-03 16:26:21 +01:00
|
|
|
Environment="CONDUWUIT_ADDRESS=0.0.0.0"
|
|
|
|
|
Environment="CONDUWUIT_WELL_KNOWN={ \
|
|
|
|
|
client=https://matrix.ellis.link, \
|
|
|
|
|
server=matrix.ellis.link:443 \
|
|
|
|
|
}"
|
|
|
|
|
|
2024-11-19 15:53:05 +00:00
|
|
|
Environment="CONDUWUIT_TURN_URIS=[\"turns:coturn.ellis.link?transport=udp\",\"turns:coturn.ellis.link?transport=tcp\",\"turn:coturn.ellis.link?transport=udp\",\"turn:coturn.ellis.link?transport=tcp\"]"
|
|
|
|
|
Environment="CONDUWUIT_TURN_SECRET=qjRh55G51K7V0ZqB7Z8ZEkxZjBLJMgkwEs8acFjx"
|
2024-11-19 13:20:32 +00:00
|
|
|
|
2024-10-03 16:26:21 +01:00
|
|
|
Environment="CONDUWUIT_SENTRY=true"
|
|
|
|
|
Environment="CONDUWUIT_SENTRY_ENDPOINT=https://c885d1475cef5c54bbd32b1512e0ae20@o4507835405369344.ingest.de.sentry.io/4508059491696720"
|
|
|
|
|
|
|
|
|
|
StopTimeout=100
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
RestartSec=5
|
|
|
|
|
|
|
|
|
|
TimeoutStopSec=2m
|
|
|
|
|
TimeoutStartSec=2m
|
|
|
|
|
|
|
|
|
|
# StartLimitInterval=1m
|
|
|
|
|
StartLimitBurst=5
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=default.target
|
