1 files changed, 17 insertions, 2 deletions
diff --git a/terminaldweller.com/main/nginx.conf b/terminaldweller.com/main/nginx.conf
index 1a9ea0e..3801219 100644
--- a/terminaldweller.com/main/nginx.conf
+++ b/terminaldweller.com/main/nginx.conf
@@ -15,8 +15,8 @@ http {
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
     ssl_ciphers HIGH:!aNULL:!MD5:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
     ssl_prefer_server_ciphers on;
-    ssl_certificate /certs/fullchain1.pem;
-    ssl_certificate_key /certs/privkey1.pem;
+    ssl_certificate /etc/letsencrypt/live/terminaldweller.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/terminaldweller.com/privkey.pem;
     ssl_protocols TLSv1.2 TLSv1.3;
     add_header Content-Security-Policy "default-src 'self';";
     add_header X-Frame-Options SAMEORIGIN always;
@@ -32,6 +32,7 @@ http {
       add_header Content-Type "application/json";
       alias /srv/.well-known/webfinger/finger.json;
     }
+
     # https://metacode.biz/openpgp/web-key-directory?
     location /.well-known/openpgpkey/hu/ojxfrmdxrz4pm3hh16s5149w5b8acbsn {
       alias /srv/.well-known/openpgpkey/hu/gpg_pubkey.asc;
@@ -41,6 +42,20 @@ http {
       alias /srv/.well-known/openpgpkey/policy;
       add_header Access-Control-Allow-Origin "*";
     }
+
+    location /.well-known/matrix/server {
+      access_log off;
+      add_header Access-Control-Allow-Origin "*";
+      default_type application/json;
+      return 200 '{"m.server": "matrix.terminaldweller.com:443"}';
+    }
+    location /.well-known/matrix/client {
+      access_log off;
+      add_header Access-Control-Allow-Origin "*";
+      default_type application/json;
+      return 200 '{"m.homeserver": {"base_url": "https://matrix.terminaldweller.com"}}';
+    }
+
     location / {
       root /srv/;
       add_header Access-Control-Allow-Origin "*";