From 4c7d06161be711b11d5a2b6cfffb31599dd0ace6 Mon Sep 17 00:00:00 2001
From: Rory& <root@rory.gay>
Date: Thu, 4 Jul 2024 21:30:36 +0200
Subject: Federation readers

---
 .../services/matrix/synapse/synapse-main.nix       |   3 +
 .../matrix/synapse/workers/federation-inbound.nix  |  91 +++++++++++++++++
 .../matrix/synapse/workers/federation-reader.nix   | 111 +++++++++++++++++++++
 .../services/matrix/synapse/workers/module.nix     |  12 +++
 4 files changed, 217 insertions(+)
 create mode 100644 host/Rory-nginx/services/matrix/synapse/workers/federation-inbound.nix
 create mode 100644 host/Rory-nginx/services/matrix/synapse/workers/federation-reader.nix

diff --git a/host/Rory-nginx/services/matrix/synapse/synapse-main.nix b/host/Rory-nginx/services/matrix/synapse/synapse-main.nix
index cdbb6b7..42a880d 100755
--- a/host/Rory-nginx/services/matrix/synapse/synapse-main.nix
+++ b/host/Rory-nginx/services/matrix/synapse/synapse-main.nix
@@ -20,6 +20,9 @@
     mediaRepoWorkers = 8;
     clientReaders = 16;
 
+    federationReaders = 16;
+    federationInboundWorkers = 16;
+
     enableAppserviceWorker = true;
     enableBackgroundWorker = true;
     enableUserDirWorker = true;
diff --git a/host/Rory-nginx/services/matrix/synapse/workers/federation-inbound.nix b/host/Rory-nginx/services/matrix/synapse/workers/federation-inbound.nix
new file mode 100644
index 0000000..c2c84ec
--- /dev/null
+++ b/host/Rory-nginx/services/matrix/synapse/workers/federation-inbound.nix
@@ -0,0 +1,91 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+let
+  cfg = config.services.matrix-synapse;
+  workers = lib.range 0 (cfg.federationReaders - 1);
+  routes = [
+    "~ /_matrix/federation/(v1|v2)/send/"
+  ];
+in
+{
+  config = lib.mkIf (cfg.federationInboundWorkers > 0) {
+    services.matrix-synapse = {
+      settings = {
+        instance_map = lib.listToAttrs (
+          lib.map (index: {
+            name = "federation_inbound-${toString index}";
+            value = {
+              path = "/run/matrix-synapse/federation_inbound-${toString index}.sock";
+            };
+          }) workers
+        );
+      };
+
+      workers = lib.listToAttrs (
+        lib.map (index: {
+          name = "federation_inbound-${toString index}";
+          value = {
+            worker_app = "synapse.app.generic_worker";
+            worker_listeners = [
+              {
+                type = "http";
+                path = "/run/matrix-synapse/federation_inbound-${toString index}.sock";
+                resources = [
+                  {
+                    names = [ "replication" ];
+                    compress = false;
+                  }
+                ];
+              }
+              {
+                type = "http";
+                path = "/run/matrix-synapse/federation_inbound-federation-${toString index}.sock";
+                mode = "666";
+                resources = [
+                  {
+                    names = [ "federation" ];
+                    compress = false;
+                  }
+                ];
+              }
+            ];
+            database = (
+              import ../db.nix {
+                workerName = "federation_inbound-${toString index}";
+                dbGroup = "medium";
+              }
+            );
+          };
+        }) workers
+      );
+    };
+
+    services.nginx.upstreams."federation_inbound" = {
+      extraConfig = ''
+        keepalive 32;
+      '';
+      servers = lib.listToAttrs (
+        lib.map (index: {
+          name = "unix:/run/matrix-synapse/federation_inbound-federation-${toString index}.sock";
+          value = {
+            max_fails = 0;
+          };
+        }) workers
+      );
+    };
+
+    services.nginx.virtualHosts."${cfg.nginxVirtualHostName}".locations = lib.listToAttrs (
+      lib.map (route: {
+        name = route;
+        value = {
+          proxyPass = "http://federation_inbound";
+        };
+      }) routes
+    );
+  };
+}
diff --git a/host/Rory-nginx/services/matrix/synapse/workers/federation-reader.nix b/host/Rory-nginx/services/matrix/synapse/workers/federation-reader.nix
new file mode 100644
index 0000000..e48ba05
--- /dev/null
+++ b/host/Rory-nginx/services/matrix/synapse/workers/federation-reader.nix
@@ -0,0 +1,111 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+let
+  cfg = config.services.matrix-synapse;
+  workers = lib.range 0 (cfg.federationReaders - 1);
+  routes = [
+    "~ ^/_matrix/federation/(v1|v2)/event/"
+    "~ ^/_matrix/federation/(v1|v2)/state/"
+    "~ ^/_matrix/federation/(v1|v2)/state_ids/"
+    "~ ^/_matrix/federation/(v1|v2)/backfill/"
+    "~ ^/_matrix/federation/(v1|v2)/get_missing_events/"
+    "~ ^/_matrix/federation/(v1|v2)/publicRooms"
+    "~ ^/_matrix/federation/(v1|v2)/query/"
+    "~ ^/_matrix/federation/(v1|v2)/make_join/"
+    "~ ^/_matrix/federation/(v1|v2)/make_leave/"
+    "~ ^/_matrix/federation/(v1|v2)/send_join/"
+    "~ ^/_matrix/federation/(v1|v2)/send_leave/"
+    "~ ^/_matrix/federation/v1/make_knock/"
+    "~ ^/_matrix/federation/v1/send_knock/"
+    "~ ^/_matrix/federation/(v1|v2)/invite/"
+    "~ ^/_matrix/federation/(v1|v2)/query_auth/"
+    "~ ^/_matrix/federation/(v1|v2)/event_auth/"
+    "~ ^/_matrix/federation/v1/timestamp_to_event/"
+    "~ ^/_matrix/federation/(v1|v2)/exchange_third_party_invite/"
+    "~ ^/_matrix/federation/(v1|v2)/user/devices/"
+    "~ ^/_matrix/federation/(v1|v2)/get_groups_publicised$"
+    "~ ^/_matrix/key/v2/query"
+  ];
+in
+{
+  config = lib.mkIf (cfg.federationReaders > 0) {
+    services.matrix-synapse = {
+      settings = {
+        instance_map = lib.listToAttrs (
+          lib.map (index: {
+            name = "federation_reader-${toString index}";
+            value = {
+              path = "/run/matrix-synapse/federation_reader-${toString index}.sock";
+            };
+          }) workers
+        );
+      };
+
+      workers = lib.listToAttrs (
+        lib.map (index: {
+          name = "federation_reader-${toString index}";
+          value = {
+            worker_app = "synapse.app.generic_worker";
+            worker_listeners = [
+              {
+                type = "http";
+                path = "/run/matrix-synapse/federation_reader-${toString index}.sock";
+                resources = [
+                  {
+                    names = [ "replication" ];
+                    compress = false;
+                  }
+                ];
+              }
+              {
+                type = "http";
+                path = "/run/matrix-synapse/federation_reader-federation-${toString index}.sock";
+                mode = "666";
+                resources = [
+                  {
+                    names = [ "federation" ];
+                    compress = false;
+                  }
+                ];
+              }
+            ];
+            database = (
+              import ../db.nix {
+                workerName = "federation_reader-${toString index}";
+                dbGroup = "medium";
+              }
+            );
+          };
+        }) workers
+      );
+    };
+
+    services.nginx.upstreams."federation_reader" = {
+      extraConfig = ''
+        keepalive 32;
+      '';
+      servers = lib.listToAttrs (
+        lib.map (index: {
+          name = "unix:/run/matrix-synapse/federation_reader-federation-${toString index}.sock";
+          value = {
+            max_fails = 0;
+          };
+        }) workers
+      );
+    };
+
+    services.nginx.virtualHosts."${cfg.nginxVirtualHostName}".locations = lib.listToAttrs (
+      lib.map (route: {
+        name = route;
+        value = {
+          proxyPass = "http://federation_reader";
+        };
+      }) routes
+    );
+  };
+}
diff --git a/host/Rory-nginx/services/matrix/synapse/workers/module.nix b/host/Rory-nginx/services/matrix/synapse/workers/module.nix
index ebe4732..1450d52 100644
--- a/host/Rory-nginx/services/matrix/synapse/workers/module.nix
+++ b/host/Rory-nginx/services/matrix/synapse/workers/module.nix
@@ -19,6 +19,8 @@ in
     ./appservice.nix
     ./background.nix
     ./client-reader.nix
+    ./federation-inbound.nix
+    ./federation-reader.nix
     ./federation-sender.nix
     ./media-repo.nix
     ./pusher.nix
@@ -79,6 +81,16 @@ in
         default = 0;
         description = "Number of client readers";
       };
+      federationReaders = lib.mkOption {
+        type = lib.types.int;
+        default = 0;
+        description = "Number of federation readers";
+      };
+      federationInboundWorkers = lib.mkOption {
+        type = lib.types.int;
+        default = 0;
+        description = "Number of federation inbound workers";
+      };
 
       nginxVirtualHostName = lib.mkOption {
         type = lib.types.str;
-- 
cgit 1.4.1