From 68645f75136d6e82bfb7e27b50c531d1b416c4d5 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Mon, 30 Jan 2023 16:09:43 +0100
Subject: ...

---
 hosts/surtr/matrix/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'hosts/surtr/matrix/default.nix')

diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix
index 5b89e321..96cceb89 100644
--- a/hosts/surtr/matrix/default.nix
+++ b/hosts/surtr/matrix/default.nix
@@ -151,6 +151,8 @@ with lib;
         sslCertificate = "/run/credentials/nginx.service/synapse.li.pem";
         sslCertificateKey = "/run/credentials/nginx.service/synapse.li.key.pem";
         sslTrustedCertificate = "/run/credentials/nginx.service/synapse.li.chain.pem";
+        kTLS = true;
+        http3 = true;
         listen = [
           { addr = "0.0.0.0"; port = 443; ssl = true; }
           { addr = "[::0]"; port = 443; ssl = true; }
@@ -199,6 +201,8 @@ with lib;
 
       virtualHosts."element.synapse.li" = {
         forceSSL = true;
+        kTLS = true;
+        http3 = true;
         sslCertificate = "/run/credentials/nginx.service/element.synapse.li.pem";
         sslCertificateKey = "/run/credentials/nginx.service/element.synapse.li.key.pem";
         sslTrustedCertificate = "/run/credentials/nginx.service/element.synapse.li.chain.pem";
-- 
cgit v1.2.3