diff --git a/servers/containers/conduwuit.container b/servers/containers/conduwuit.container new file mode 100644 index 00000000..85df6597 --- /dev/null +++ b/servers/containers/conduwuit.container @@ -0,0 +1,73 @@ + + +[Unit] +Description=Conduwuit (matrix) +Wants=network-online.target +After=network-online.target +Documentation=https://conduwuit.puppyirl.gay/ + +[Container] +ContainerName=conduwuit +NoNewPrivileges=true +Image=ghcr.io/girlbossceo/conduwuit:latest +ReadOnly=true +Volume=/var/opt/conduwuit:/var/lib/conduwuit:z,U +AutoUpdate=registry +Network=web.network +# conduwuit uses quite a few file descriptors, and on some systems it defaults to 1024 +Ulimit=nofile=1048567:1048567 + +Label="traefik.enable=true" +Label="traefik.http.routers.conduwuit.rule=(Host(`matrix.ellis.link`) || (Host(`ellis.link`) && PathPrefix(`/.well-known/matrix`)))" +Label="traefik.http.services.conduwuit.loadbalancer.server.port=6167" + +Label="traefik.http.routers.conduwuit.entrypoints=https" + +Label="traefik.http.routers.conduwuit.tls.certresolver=letsencrypt" +# Label="traefik.http.routers.conduwuit.tls.options=intermediate@file" + +Label="traefik.http.routers.conduwuit.middlewares=default@file" + +Label="homepage.group=Public" +Label="homepage.name=Conduwuit" +# Label="homepage.href=https://jade.ellis.link/" +# Label="homepage.siteMonitor=https://jade.ellis.link/" +# Label="homepage.description= + + +Environment="CONDUWUIT_SERVER_NAME=ellis.link" + +Environment="CONDUWUIT_DATABASE_PATH=/var/lib/conduwuit" +Environment="CONDUWUIT_DATABASE_BACKEND=rocksdb" +# should match the loadbalancer traefik label +Environment="CONDUWUIT_PORT=6167" +# in bytes, ~20 MB +Environment="CONDUWUIT_MAX_REQUEST_SIZE=20000000" +Environment="CONDUWUIT_ALLOW_REGISTRATION=false" +Environment="CONDUWUIT_ALLOW_FEDERATION=true" +# Environment="CONDUWUIT_TRUSTED_SERVERS=[\"matrix.org\"]" +# Environment="CONDUWUIT_LOG: warn,state_res=warn" +Environment="CONDUWUIT_ADDRESS=0.0.0.0" +Environment="CONDUWUIT_WELL_KNOWN={ \ +client=https://matrix.ellis.link, \ +server=matrix.ellis.link:443 \ +}" + +Environment="CONDUWUIT_SENTRY=true" +Environment="CONDUWUIT_SENTRY_ENDPOINT=https://c885d1475cef5c54bbd32b1512e0ae20@o4507835405369344.ingest.de.sentry.io/4508059491696720" + +StopTimeout=100 + +[Service] + +Restart=on-failure +RestartSec=5 + +TimeoutStopSec=2m +TimeoutStartSec=2m + +# StartLimitInterval=1m +StartLimitBurst=5 + +[Install] +WantedBy=default.target \ No newline at end of file