Add matrix server

modules/services/caddy.nix

@@ -22,7 +22,37 @@
     virtualHosts = {
       "nicknase27.com" = {
         extraConfig = ''
-          respond "Blank" 200
+          # CORS headers for Matrix .well-known lookup
+          @matrix path /.well-known/matrix/*
+          header @matrix {
+            Access-Control-Allow-Origin "*"
+            Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
+            Access-Control-Allow-Headers "X-Requested-With, Content-Type, Authorization"
+            Content-Type "application/json"
+          }
+
+          # Matrix Client & Server Delegation
+          respond /.well-known/matrix/client `{"m.homeserver":{"base_url":"https://nicknase27.com"},"org.matrix.msc4143.rtc_foci":[{"type":"livekit","livekit_service_url":"https://rtc-jwt.nicknase27.com"}]}`
+          respond /.well-known/matrix/server `{"m.server":"nicknase27.com:443"}`
+
+          # Route Matrix API requests to Tuwunel
+          reverse_proxy /_matrix/* localhost:6167
+
+          # Root domain catch-all (disable tuwunel landing page text)
+          respond / " " 200
+        '';
+      };
+      # Reverse proxy for LiveKit JWT Service
+      "rtc-jwt.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy localhost:8081
+        '';
+      };
+
+      # Reverse proxy for LiveKit WebSocket / Signal API
+      "matrix-rtc.nicknase27.com" = {
+        extraConfig = ''
+          reverse_proxy localhost:7880
         '';
       };
       "nv.nicknase27.com" = {