bicep/matrix/synapse: use fewer connections

bicep/nginx: increase workers and enable modern compression
Should decrease latency
2023-09-13 11:02:52 +02:00 · 2023-09-13 11:01:09 +02:00
2 changed files with 19 additions and 3 deletions
--- a/hosts/bicep/services/nginx/default.nix
+++ b/hosts/bicep/services/nginx/default.nix
@ -19,11 +19,27 @@
      "[::1]"
    ];

+    appendConfig = ''
+      pcre_jit on;
+      worker_processes 8;
+      worker_rlimit_nofile 8192;
+    '';
+
+    eventsConfig = ''
+      multi_accept on;
+      worker_connections 4096;
+    '';
+
    recommendedProxySettings = true;
    recommendedTlsSettings = true;
    recommendedGzipSettings = true;
+    recommendedBrotliSettings = true;
    recommendedOptimisation = true;
  };

  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  systemd.services.nginx.serviceConfig = {
+    LimitNOFILE = 65536;
+  };
 }
--- a/secrets/bicep/matrix.yaml
+++ b/secrets/bicep/matrix.yaml
@ -1,5 +1,5 @@
 synapse:
-    dbconfig: ENC[AES256_GCM,data:I8yu5vYkOhcqr/q20m//0CJJbjuAdzZ8k/BFq0+fozKxX17tx9ncrouzKhHOhxH+WnqyV7yfXdhHkfgNgGvPF9HlPfHeGy7ID75ayM4ChccBxvkqumJpuELGvTXU/MOBb13QKCA8dvoe8tijVp0=,iv:ps/O3mJ1ChGoK4VxlnhmjkIf6v2FFYxDADg37dkY0w8=,tag:S1s81HCKsooVzgX3svbqvw==,type:str]
+    dbconfig: ENC[AES256_GCM,data:DzbYi9TUfdxJ9Y/dC26TBvXMu/3rnbuv/jKKcW7RfUORZFIMPYz9ZcL1nl5RwTIAI65PJEDDz9UXkynjiteJppfS1g09vF+UerUg6BWDFi+JLpXwwg3EtTA3WLCX/nZKsoR1rOzT8+wsXghozIs9KhRNQlvBP0t2qcahKrrnznR+cLXBcimmwmgX,iv:VKimpBPerhTaJYgJ9hVfNBAZO8xLCWpwuRqdWx4/DqY=,tag:wxh0qrTHMLSBoTnqDpqV5A==,type:str]
    turnconfig: ENC[AES256_GCM,data:mASRjYa4C9WRow4x0XYRrlCE5LMJUYaId+o62r1qhsyJPa2LzrI=,iv:5vYdubvMDjLS6soiWx2DzkEAATb9NFbSS/Jhuuz1yI8=,tag:wOW07CQMDbOiZNervee/pg==,type:str]
    user_registration: ENC[AES256_GCM,data:ZDZfEEvyw8pg0WzhrdC8747ed+ZR2ZA8/WypJd/iDkmIy2RmxOeI0sE=,iv:l61mOlvzpCql4fC/eubBSU6px21et2WcpxQ6rFl14iw=,tag:sVDEAa3xipKIi/6isCjWew==,type:str]
    signing_key: ENC[AES256_GCM,data:6UpfiRlX9pRM7zhdm7Mc8y8EItLzugWkHSgE0tGpEmudCTa1wc60oNbYfhKDWU81DT/U148pZOoX1A==,iv:UlqCPicPm5eNBz1xBMI3A3Rn4t/GtldNIDdMH5MMnLw=,tag:HHaw6iMjEAv5b9mjHSVpwA==,type:str]
@ -42,8 +42,8 @@ sops:
            cGxZVnFhdXRka2drTGdkVk1iM0pFL1kK2ry7b2cLYPfntWi/BV3K2O+mHt3242Ef
            sI2JLLQYHeAhxjFdCzP1RDR+Wu/pRxZje6xuTZ9I9TKNmm+LhAXHQw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-09-13T02:13:45Z"
-    mac: ENC[AES256_GCM,data:NPJ0o+tH0P+zEHQndJGjmtZNezMiMRr4EtEiduZlU8iy8ByETphv8liQnrRt0S0I8fYXwQM/sVASBu7pw2johAkIakPiRGakXtmms31gSvSBef7TiLI5hNYRczoRbAK0co2bf0qz9QFNg86ALhybSDlhnBHw7vaXTyJTH8yCOd0=,iv:lMT49LMQnEp1A34wLpYIoHua97FV0a5byLrxRyr/NKA=,tag:iCRDx407/3/edJ8x7PB5rA==,type:str]
+    lastmodified: "2023-09-13T09:02:19Z"
+    mac: ENC[AES256_GCM,data:zmRZCDBwF9h/o9qAdWII4DPjoX+2b1d5+qigIizaXQrRORdlvQHHeRx72uIIcIr6Oi06YJ+nCLuKp3t5YyB2KrFtTHaW0+h7OybfnAt1Xs8LEPKPhoN90isHNr/7V6cZrVQAGg8nWUDP183vkXkADxeYHRHGxydqLKUJ5Mif1E8=,iv:kBQmskPQFVi+T/THmtj0ifbP5VsQMAxGz92Mi0Xu9RY=,tag:g4MYOAhQZHRo4rdg7emC1Q==,type:str]
    pgp:
        - created_at: "2023-05-06T21:31:39Z"
          enc: |
Author	SHA1	Message	Date
Daniel Olsen	7cd5b42f12	bicep/matrix/synapse: use fewer connections	2023-09-13 11:02:52 +02:00
Daniel Olsen	816997b74f	bicep/nginx: increase workers and enable modern compression Should decrease latency	2023-09-13 11:01:09 +02:00