From 48c399049914aeb92eb9eb580452650f3700e5a6 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@local>
Date: Mon, 27 Jul 2026 12:02:32 +0000
Subject: [PATCH] tuwunel compose + well-known

---
 .env                     |  1 +
 docker-compose.yml       | 52 ++++++++++++++++++++++++++++++++++++++++
 well-known/matrix/client |  8 +++++++
 well-known/matrix/server |  3 +++
 4 files changed, 64 insertions(+)
 create mode 100644 .env
 create mode 100644 docker-compose.yml
 create mode 100644 well-known/matrix/client
 create mode 100644 well-known/matrix/server

diff --git a/.env b/.env
new file mode 100644
index 0000000..cd424c1
--- /dev/null
+++ b/.env
@@ -0,0 +1 @@
+TUWUNEL_REGISTRATION_TOKEN=3ccb4aee0aa14b56395b01e7f83f72f7
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..916d958
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,52 @@
+services:
+  tuwunel:
+    image: ghcr.io/matrix-construct/tuwunel:latest
+    container_name: tuwunel
+    restart: unless-stopped
+    expose:
+      - "8008"
+    networks:
+      - coolify
+    environment:
+      TUWUNEL_SERVER_NAME: "mmdv-chats.dynv6.net"
+      TUWUNEL_DATABASE_PATH: "/var/lib/tuwunel"
+      TUWUNEL_PORT: "8008"
+      TUWUNEL_ADDRESS: "0.0.0.0"
+      TUWUNEL_ALLOW_REGISTRATION: "true"
+      TUWUNEL_REGISTRATION_TOKEN: "c17637929e7476a10e0841503e8bd6f4"
+      TUWUNEL_ALLOW_FEDERATION: "true"
+      TUWUNEL_TRUSTED_SERVERS: "[\"matrix.org\"]"
+    volumes:
+      - tuwunel-db:/var/lib/tuwunel
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tuwunel-http.entrypoints: "https"
+      traefik.http.routers.tuwunel-http.rule: "Host(`mmdv-chats.dynv6.net`)"
+      traefik.http.routers.tuwunel-http.tls.certresolver: "letsencrypt"
+      traefik.http.routers.tuwunel-http.service: "tuwunel"
+      traefik.http.services.tuwunel.loadbalancer.server.port: "8008"
+
+  well-known:
+    image: nginx:alpine
+    container_name: tuwunel-wellknown
+    restart: unless-stopped
+    expose:
+      - "80"
+    networks:
+      - coolify
+    volumes:
+      - ./well-known:/usr/share/nginx/html/.well-known:ro
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tuwunel-wk.entrypoints: "https"
+      traefik.http.routers.tuwunel-wk.rule: "Host(`mmdv-chats.dynv6.net`) && PathPrefix(`/.well-known`)"
+      traefik.http.routers.tuwunel-wk.tls.certresolver: "letsencrypt"
+      traefik.http.routers.tuwunel-wk.service: "tuwunel-wk"
+      traefik.http.services.tuwunel-wk.loadbalancer.server.port: "80"
+
+networks:
+  coolify:
+    external: true
+
+volumes:
+  tuwunel-db:
diff --git a/well-known/matrix/client b/well-known/matrix/client
new file mode 100644
index 0000000..e36fc8d
--- /dev/null
+++ b/well-known/matrix/client
@@ -0,0 +1,8 @@
+{
+  "m.homeserver": {
+    "base_url": "https://mmdv-chats.dynv6.net"
+  },
+  "m.identity_server": {
+    "base_url": "https://mmdv-chats.dynv6.net"
+  }
+}
diff --git a/well-known/matrix/server b/well-known/matrix/server
new file mode 100644
index 0000000..6170e5d
--- /dev/null
+++ b/well-known/matrix/server
@@ -0,0 +1,3 @@
+{
+  "m.server": "mmdv-chats.dynv6.net"
+}