helm/modules/matrix.nix

{ config, lib, pkgs, ... }:

{
  imports = [ ./matrix-slack.nix ./mautrix-whatsapp.nix ];
  security.acme.email = "anish+acme@lakhwara.com";
  security.acme.acceptTerms = true;
  services.matrix-synapse = {
    enable = true;
    app_service_config_files = [
    #  # The registration file is automatically generated after starting the appservice for the first time.
    #  # cp /var/lib/matrix-appservice-discord/discord-registration.yaml /var/lib/matrix-synapse/
    #  # chown matrix-synapse:matrix-synapse /var/lib/matrix-synapse/discord-registration.yaml
    #   "/var/lib/matrix-synapse/discord-registration.yaml"
       "/var/lib/matrix-synapse/telegram-registration.yaml"
       "/var/lib/matrix-synapse/slack-registration.yaml"
       "/var/lib/matrix-synapse/whatsapp-registration.yaml"
    ];
    server_name = "sealight.xyz";
    registration_shared_secret = "hD9HQGTTDxp0mQsQ5JDsfudWMDiubmZENOgPchIvfBvUlPxlvQSvjoO4wn2L1seU";
    enable_metrics = true;
    enable_registration = true;
    database_type = "psycopg2";
    database_args = {
      database = "matrix-synapse";
    };
    listeners = [
      {
        port = 8448;
        tls = false;
        resources = [
          {
            compress = true;
            names = ["client" "federation"];
          }
        ];
      }
    ];
    extraConfig = ''
      max_upload_size: "50M"
    '';
  };

  services.mautrix-telegram = {
    enable = true;
    environmentFile = /etc/secrets/telegram.env; # file containing the appservice and telegram tokens
    # The appservice is pre-configured to use SQLite by default. It's also possible to use PostgreSQL.
    settings = {
      homeserver = {
        address = "https://chat.sealight.xyz";
        domain = "sealight.xyz";
      };
      appservice = {
        provisioning.enabled = false;
        id = "telegram";
        public = {
          enabled = false;
          prefix = "/public";
          external = "https://chat.sealight.xyz/public";
        };
        # The service uses SQLite by default, but it's also possible to use PostgreSQL instead:
        #database = "postgresql:///mautrix-telegram?host=/run/postgresql";
      };
      bridge = {
        relaybot.authless_portals = false;
        permissions = {
          "@aynish:sealight.xyz" = "admin";
        };
      };
    };
  };

  services.mautrix-whatsapp = {
    enable = true;
    # The appservice is pre-configured to use SQLite by default. It's also possible to use PostgreSQL.
    configOptions = {
      homeserver = {
        address = "https://chat.sealight.xyz";
        domain = "sealight.xyz";
      };
      appservice = {
        id = "whatsapp";
	address = http://localhost:9897;
	hostname = "0.0.0.0";
	port = 9897;
	database = {
  	  type = "sqlite3";
  	  uri = "/var/lib/mautrix-whatsapp/mautrix-whatsapp.db";
	};
	state_store_path = "/var/lib/mautrix-whatsapp/mx-state.json";
	bot = {
	  username = "whatsappbot";
	  displayname = "WhatsApp bridge bot";
	  avatar = "mxc://maunium.net/NeXNQarUbrlYBiPCpprYsRqr";
	};
	as_token = "";
	hs_token = "";
      };
      bridge = {
	username_template = "whatsapp_{{.}}";
	displayname_template = "{{if .Notify}}{{.Notify}}{{else}}{{.Jid}}{{end}} (WA)";
	command_prefix = "!wa";
	permissions = {
		"@aynish:sealight.xyz" = 100;
	};
      };
      logging = {
        directory = "/var/lib/mautrix-whatsapp/logs";
	file_name_format = "{{.Date}}-{{.Index}}.log";
	file_date_format = "\"2006-01-02\"";
	file_mode = 384;
	timestamp_format = "Jan _2, 2006 15:04:05";
	print_level = "debug";
      };
      metrics = {
	enabled = true;
	listen  = "http://localhost:5070";
      };
    };
  };

  services.matrix-appservice-slack = {
    enable = true;
    #environmentFile = /etc/secrets/matrix-appservice-slack.env;
    settings = {
      homeserver = {
        server_name = "sealight.xyz";
        url = "https://chat.sealight.xyz";
      };
      db = {
        engine = "postgres";
        connectionString = "postgres://slackbridge_user:somethingverysecret@localhost/slack_bridge?sslmode=require";
      };
      matrix_admin_room = "!ikEWOHCcmoZtVzSmPF:sealight.xyz";
      username_prefix = "slack_";
      rtm = {
        enable = true;
        logging = "silent";
      };
      slack_hook_port = 9899;
      enable_metrics = true;
      puppeting = {
        enabled = true;
        onboard_users = true;
      };
      oauth2 = {
        client_id = "2832868673.1609454840563";
        client_secret = "079a7ca42b192e66a9ff32740a69cb9d";
        redirect_prefix = "https://sealight.xyz/slackbridge/";
      };
      #team_sync = {
      #  T02QGRJKT = {
      #    users = {
      #      enabled = false;
      #    };
      #    channels = {
      #       enabled = true;
      #       alias_prefix = "qf_";
      #    };
      #  };
      #};
    };
  };

  services.postgresql = {
    enable = true;
    ## postgresql user and db name remains in the
    ## service.matrix-synapse.database_args setting which
    ## by default is matrix-synapse
    initialScript = pkgs.writeText "synapse-init.sql" ''
        CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD "Da0?H*9i{x?,]|'kq@iBwlIzu";
        CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
            TEMPLATE template0
            LC_COLLATE = "C"
            LC_CTYPE = "C";
        '';
  };

  networking.firewall = {
    enable = true;
    allowedTCPPorts = [
      22    # SSH
      8448  # Matrix federation
      8008
      80 
      443
      9899 # Matrix <-> Slack Bridge Puppeting
    ];
  };

 nixpkgs.overlays = [
    (self: super: {
        element-web = super.element-web.override {
            conf = {
                 default_server_config = {
                    "m.homeserver" = {
                        "base_url" = "https://chat.sealight.xyz";
                        "server_name" = "sealight.xyz";
                    };
                    "m.identity_server" = {
                        "base_url" = "https://vector.im";
                    };
                 };

                 ## jitsi will be setup later,
                 ## but we need to add to Riot configuration
                 #jitsi.preferredDomain = "jitsi.dangerousdemos.net";
            };
        };
    })
  ];

  services.nginx = {
   enable = true;
   virtualHosts = {

     "sealight.xyz" = {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
         root = "/var/www/sealight.xyz";
       };
       locations."/_matrix" = {
         proxyPass = "http://localhost:8448";
       };
       locations."/slackbridge" = {
         proxyPass = "http://localhost:9899";
       };
     };
     ## virtual host for Synapse
     "chat.sealight.xyz" = {
       forceSSL = true;
       enableACME = true;
       #useACMEHost = "sealight.xyz";
       locations."/" = {
         proxyPass = "http://localhost:8448";
       };
     };

     ## virtual host for Riot/Web
     "element.sealight.xyz" = {
       forceSSL = true;
       enableACME = true;
       #useACMEHost = "sealight.xyz";

       ## root points to the riot-web package content, also configured via Nix
       locations."/" = {
           root = pkgs.element-web;
       };
     };
   };
   ## other nginx specific best practices
   recommendedGzipSettings = true;
   recommendedOptimisation = true;
   recommendedTlsSettings = true;
  };

  environment.systemPackages = with pkgs; [ matrix-appservice-slack ];
}