From 60adb4c9388816d8b8eb17b2e844de8d1e0dc081 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 31 Jan 2023 13:31:37 +0100
Subject: Revert "Revert "...""

This reverts commit 1e82933a01dcc3810d635567dbef0de286c1e8f2.
---
 hosts/surtr/matrix/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'hosts/surtr/matrix/default.nix')

diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix
index e4f23703..1772199b 100644
--- a/hosts/surtr/matrix/default.nix
+++ b/hosts/surtr/matrix/default.nix
@@ -151,6 +151,8 @@ with lib;
         sslCertificate = "/run/credentials/nginx.service/synapse.li.pem";
         sslCertificateKey = "/run/credentials/nginx.service/synapse.li.key.pem";
         sslTrustedCertificate = "/run/credentials/nginx.service/synapse.li.chain.pem";
+        kTLS = true;
+        http3 = true;
         listen = [
           { addr = "0.0.0.0"; port = 80; ssl = false; }
           { addr = "[::0]"; port = 80; ssl = false; }
@@ -201,6 +203,8 @@ with lib;
 
       virtualHosts."element.synapse.li" = {
         forceSSL = true;
+        kTLS = true;
+        http3 = true;
         sslCertificate = "/run/credentials/nginx.service/element.synapse.li.pem";
         sslCertificateKey = "/run/credentials/nginx.service/element.synapse.li.key.pem";
         sslTrustedCertificate = "/run/credentials/nginx.service/element.synapse.li.chain.pem";
-- 
cgit v1.2.3