bicep/matrix/synapse: use fewer connections

Should decrease latency

hosts/bicep/services/nginx/default.nix

@@ -19,11 +19,27 @@
       "[::1]"
     ];
 
+    appendConfig = ''
+      pcre_jit on;
+      worker_processes 8;
+      worker_rlimit_nofile 8192;
+    '';
+
+    eventsConfig = ''
+      multi_accept on;
+      worker_connections 4096;
+    '';
+
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
     recommendedGzipSettings = true;
+    recommendedBrotliSettings = true;
     recommendedOptimisation = true;
   };
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  systemd.services.nginx.serviceConfig = {
+    LimitNOFILE = 65536;
+  };
 }

secrets/bicep/matrix.yaml

@@ -1,5 +1,5 @@
 synapse:
-    dbconfig: ENC[AES256_GCM,data:I8yu5vYkOhcqr/q20m//0CJJbjuAdzZ8k/BFq0+fozKxX17tx9ncrouzKhHOhxH+WnqyV7yfXdhHkfgNgGvPF9HlPfHeGy7ID75ayM4ChccBxvkqumJpuELGvTXU/MOBb13QKCA8dvoe8tijVp0=,iv:ps/O3mJ1ChGoK4VxlnhmjkIf6v2FFYxDADg37dkY0w8=,tag:S1s81HCKsooVzgX3svbqvw==,type:str]
+    dbconfig: ENC[AES256_GCM,data:DzbYi9TUfdxJ9Y/dC26TBvXMu/3rnbuv/jKKcW7RfUORZFIMPYz9ZcL1nl5RwTIAI65PJEDDz9UXkynjiteJppfS1g09vF+UerUg6BWDFi+JLpXwwg3EtTA3WLCX/nZKsoR1rOzT8+wsXghozIs9KhRNQlvBP0t2qcahKrrnznR+cLXBcimmwmgX,iv:VKimpBPerhTaJYgJ9hVfNBAZO8xLCWpwuRqdWx4/DqY=,tag:wxh0qrTHMLSBoTnqDpqV5A==,type:str]
     turnconfig: ENC[AES256_GCM,data:mASRjYa4C9WRow4x0XYRrlCE5LMJUYaId+o62r1qhsyJPa2LzrI=,iv:5vYdubvMDjLS6soiWx2DzkEAATb9NFbSS/Jhuuz1yI8=,tag:wOW07CQMDbOiZNervee/pg==,type:str]
     user_registration: ENC[AES256_GCM,data:ZDZfEEvyw8pg0WzhrdC8747ed+ZR2ZA8/WypJd/iDkmIy2RmxOeI0sE=,iv:l61mOlvzpCql4fC/eubBSU6px21et2WcpxQ6rFl14iw=,tag:sVDEAa3xipKIi/6isCjWew==,type:str]
     signing_key: ENC[AES256_GCM,data:6UpfiRlX9pRM7zhdm7Mc8y8EItLzugWkHSgE0tGpEmudCTa1wc60oNbYfhKDWU81DT/U148pZOoX1A==,iv:UlqCPicPm5eNBz1xBMI3A3Rn4t/GtldNIDdMH5MMnLw=,tag:HHaw6iMjEAv5b9mjHSVpwA==,type:str]
@@ -42,8 +42,8 @@ sops:
             cGxZVnFhdXRka2drTGdkVk1iM0pFL1kK2ry7b2cLYPfntWi/BV3K2O+mHt3242Ef
             sI2JLLQYHeAhxjFdCzP1RDR+Wu/pRxZje6xuTZ9I9TKNmm+LhAXHQw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-09-13T02:13:45Z"
+    lastmodified: "2023-09-13T09:02:19Z"
-    mac: ENC[AES256_GCM,data:NPJ0o+tH0P+zEHQndJGjmtZNezMiMRr4EtEiduZlU8iy8ByETphv8liQnrRt0S0I8fYXwQM/sVASBu7pw2johAkIakPiRGakXtmms31gSvSBef7TiLI5hNYRczoRbAK0co2bf0qz9QFNg86ALhybSDlhnBHw7vaXTyJTH8yCOd0=,iv:lMT49LMQnEp1A34wLpYIoHua97FV0a5byLrxRyr/NKA=,tag:iCRDx407/3/edJ8x7PB5rA==,type:str]
+    mac: ENC[AES256_GCM,data:zmRZCDBwF9h/o9qAdWII4DPjoX+2b1d5+qigIizaXQrRORdlvQHHeRx72uIIcIr6Oi06YJ+nCLuKp3t5YyB2KrFtTHaW0+h7OybfnAt1Xs8LEPKPhoN90isHNr/7V6cZrVQAGg8nWUDP183vkXkADxeYHRHGxydqLKUJ5Mif1E8=,iv:kBQmskPQFVi+T/THmtj0ifbP5VsQMAxGz92Mi0Xu9RY=,tag:g4MYOAhQZHRo4rdg7emC1Q==,type:str]
     pgp:
         - created_at: "2023-05-06T21:31:39Z"
           enc: |