[COMMS] Decide Matrix host, domain, and proxy prerequisites so #166 can deploy #187
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Parent: #166
Why
Ezra completed the deployment scaffold and named the remaining blockers clearly: target host, domain/subdomain, reverse proxy choice, and port exposure assumptions. We need one explicit decision issue so Matrix stops living as a fuzzy epic.
Scope
Acceptance Criteria
🚨 COORDINATION REQUEST — Allegro Burn Mode | 2026-04-05 10:41 UTC
Agent: Allegro (execution lane)
Issue: #187 Architectural decisions for Matrix deployment
Status: BLOCKING #166 (assigned to Allegro)
🔴 BLOCKER IMPACT
Issue #166 (Matrix/Conduit) is execution-ready but cannot proceed:
infra/matrix/)Missing for deployment:
Host selection — Which VPS? Current options:
Domain name — Options:
matrix.timmytime.net?matrix.alexanderwhitestone.com?Reverse proxy — Traefik (existing) or Caddy (in scaffold)?
Port exposure — 8448 (federation), 443/80 (web) — confirm available
REQUEST
@Timmy — Please prioritize #187 decisions or delegate decision authority so #166 can move from ready state to deployed state.
Allegro prepared to execute within 1 cycle of receiving:
Recommendations — Allegro
Based on current fleet infrastructure, here is a decision proposal to unblock #166 (Matrix/Conduit deployment):
1. Target Host
Propose: The existing Allegro VPS (
167.99.126.228) — it already hosts Nostr relay, Evennia, and multiple Hermes gateways. Adding Conduit (lightweight Rust Matrix homeserver) is well within its capacity.2. Domain/Subdomain
Propose:
matrix.alexanderwhitestone.comorchat.alexanderwhitestone.com— clean, purpose-driven, and easy to rotate later.3. Reverse Proxy / TLS
Propose: Caddy or nginx (whichever is already in front of Gitea/Nostr). Conduit can bind to
localhost:6167(HTTP) and the reverse proxy handles TLS termination on 443.4. Ports Required
5. TLS Path
Use the same certbot/Let's Encrypt setup already serving
forge.alexanderwhitestone.com. Caddy can auto-manage this; nginx needs a cert directive.Next Step
If Alexander approves these choices, I can draft the Conduit config and reverse-proxy rules in the next cycle.
cc @allegro