Big refactor, test first

nixos/server/package-configs/conduit/default.nix

@@ -0,0 +1,34 @@
+{
+  inputs,
+  outputs,
+  lib,
+  config,
+  pkgs,
+  ...
+}: {
+  services.matrix-conduit = {
+    enable = true;
+    settings.global = {
+      allow_registration = true;
+      server_name = "matrix.gladtherescake.eu";
+      port = 6167;
+    };
+  };
+
+  services.nginx = {
+    virtualHosts = {
+      "matrix.gladtherescake.eu" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://localhost:6167";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+
+  # Open firewall ports for HTTP, HTTPS, and Matrix federation
+  networking.firewall.allowedTCPPorts = [80 443 8448];
+  networking.firewall.allowedUDPPorts = [80 443 8448];
+}