.

docker/docker-compose-YAMLs/pangolin/dynamic_config.yml

@@ -9,6 +9,18 @@ http:
         scheme: https
 
   routers:
+
+    # Matrix Synapse router
+    matrix-router:
+      rule: "Host(`mx.raspi2806.de`) && PathPrefix(`/_matrix`)"
+      service: matrix-synapse
+      entryPoints:
+        - websecure
+      middlewares:
+        - badger
+      tls:
+        certResolver: letsencrypt
+    
     # HTTP to HTTPS redirect router
     main-app-router-redirect:
       rule: "Host(`raspi2806.de`)" # REPLACE WITH YOUR DOMAIN
@@ -63,6 +75,46 @@ http:
         servers:
           - url: "http://pangolin:3000"  # API/WebSocket server
 
+    matrix-synapse:
+      # Backend: deine LXC Synapse IP + Port
+      backend: "http://192.168.178.162:8008"
+      http_version: "1.1"
+
+      # Pfadweiterleitung: alles unter /_matrix/* direkt zu Synapse
+      paths:
+        - path: "/_matrix/*"
+          action: "pass_through"
+
+      # Timeouts für Long-Polling / Sync
+      timeouts:
+        read: 600      # 10 Minuten
+        idle: 600
+
+      # CORS für Web-App
+      headers:
+        Access-Control-Allow-Origin: "*"
+        Access-Control-Allow-Methods: "GET, POST, OPTIONS"
+        Access-Control-Allow-Headers: "Content-Type, Authorization"
+
+      # WebSockets aktivieren (HTTP/1.1)
+      websockets: true
+
+      # Optional: Trusted Reverse Proxy für x-forwarded
+      trusted_proxies:
+        - "192.168.178.124"  # IP deiner Pangolin Docker VM
+        - "172.21.0.2"
+
+      # Optional: Static Route für .well-known
+      static:
+        - path: "/.well-known/matrix/client"
+          content_type: "application/json"
+          body: |
+            {
+              "m.homeserver": {
+                "base_url": "https://mx.raspi2806.de"
+              }
+            }
+
 tcp:
   serversTransports:
     pp-transport-v1: