[Unit]
Description=Conduwuit (matrix)
Wants=network-online.target
After=network-online.target
Documentation=https://conduwuit.puppyirl.gay/

[Container]
ContainerName=conduwuit
NoNewPrivileges=true
Image=ghcr.io/girlbossceo/conduwuit:latest
ReadOnly=true
Volume=/var/opt/conduwuit:/var/lib/conduwuit:z,U
AutoUpdate=registry
Network=web.network
# conduwuit uses quite a few file descriptors, and on some systems it defaults to 1024
Ulimit=nofile=1048567:1048567

Label="traefik.enable=true"
Label="traefik.http.routers.conduwuit.rule=(Host(`matrix.ellis.link`) || (Host(`ellis.link`) && PathPrefix(`/.well-known/matrix`)))"
Label="traefik.http.services.conduwuit.loadbalancer.server.port=6167"

Label="traefik.http.routers.conduwuit.entrypoints=https"

Label="traefik.http.routers.conduwuit.tls.certresolver=letsencrypt"
# Label="traefik.http.routers.conduwuit.tls.options=intermediate@file"

Label="traefik.http.routers.conduwuit.middlewares=default@file"

Label="homepage.group=Public"
Label="homepage.name=Conduwuit"
# Label="homepage.href=https://jade.ellis.link/"
# Label="homepage.siteMonitor=https://jade.ellis.link/"
# Label="homepage.description=


Environment="CONDUWUIT_SERVER_NAME=ellis.link"

Environment="CONDUWUIT_DATABASE_PATH=/var/lib/conduwuit"
Environment="CONDUWUIT_DATABASE_BACKEND=rocksdb"
# should match the loadbalancer traefik label
Environment="CONDUWUIT_PORT=6167"
# in bytes, ~20 MB
Environment="CONDUWUIT_MAX_REQUEST_SIZE=20000000"
Environment="CONDUWUIT_ALLOW_REGISTRATION=false"
Environment="CONDUWUIT_ALLOW_FEDERATION=true"
# Environment="CONDUWUIT_TRUSTED_SERVERS=[\"matrix.org\"]"
# Environment="CONDUWUIT_LOG: warn,state_res=warn"
Environment="CONDUWUIT_ADDRESS=0.0.0.0"
Environment="CONDUWUIT_WELL_KNOWN={ \
client=https://matrix.ellis.link, \
server=matrix.ellis.link:443 \
}"

Environment="CONDUWUIT_SENTRY=true"
Environment="CONDUWUIT_SENTRY_ENDPOINT=https://c885d1475cef5c54bbd32b1512e0ae20@o4507835405369344.ingest.de.sentry.io/4508059491696720"

StopTimeout=100

[Service]

Restart=on-failure
RestartSec=5

TimeoutStopSec=2m
TimeoutStartSec=2m

# StartLimitInterval=1m
StartLimitBurst=5

[Install]
WantedBy=default.target