1 files changed, 25 insertions, 1 deletions

diff --git a/hosts/surtr/matrix.nix b/hosts/surtr/matrix.nix
index 315490cb..e3373df6 100644
--- a/hosts/surtr/matrix.nix
+++ b/hosts/surtr/matrix.nix
@@ -68,7 +68,27 @@
               add_header Strict-Transport-Security "max-age=63072000" always;
             '';
           };
-        in { "/_matrix" = synapse; "/_synapse/client" = synapse; };
+        in {
+          "/_matrix" = synapse;
+          "/_synapse/client" = synapse;
+          "/".return = "301 https://element.synapse.li$request_uri";
+        };
+      };
+
+      virtualHosts."element.synapse.li" = {
+        forceSSL = true;
+        sslCertificate = "/run/credentials/nginx.service/element.synapse.li.pem";
+        sslCertificateKey = "/run/credentials/nginx.service/element.synapse.li.key.pem";
+        sslTrustedCertificate = "/run/credentials/nginx.service/element.synapse.li.chain.pem";
+
+        root = pkgs.element-web.override {
+          conf = {
+            default_server_config."m.homeserver" = {
+              "base_url" = "https://synapse.li";
+              "server_name" = "synapse.li";
+            };
+          };
+        };
       };
     };
 
@@ -78,6 +98,10 @@
           "synapse.li.key.pem:${config.security.acme.certs."synapse.li".directory}/key.pem"
           "synapse.li.pem:${config.security.acme.certs."synapse.li".directory}/fullchain.pem"
           "synapse.li.chain.pem:${config.security.acme.certs."synapse.li".directory}/chain.pem"
+
+          "element.synapse.li.key.pem:${config.security.acme.certs."element.synapse.li".directory}/key.pem"
+          "element.synapse.li.pem:${config.security.acme.certs."element.synapse.li".directory}/fullchain.pem"
+          "element.synapse.li.chain.pem:${config.security.acme.certs."element.synapse.li".directory}/chain.pem"
         ];
       };
     };