Questions regarding main site (proxied) and matrix site (not proxied) configuration.

[baskinsy]

Hello all!

I have successfully migrated all of my proxied services to a zoraxy setup moving from nginx proxy manager. The last piece of the puzzle is a site and a matrix server running on subdomain of the main site domain and before I try to migrate that one also, I have some questions because I am unsure how to do it. Let me explain the current setup first.

I have a main site running with ghost on a VM not publicly accessible. For this site to work I proxy with nginx proxy manager the top level domain, let's say domain.com to the internal IP and port where ghost is running.

domain.com--->IP:2368

I have also a redirection on nginx proxy manager for

www.domain.com--->domain.com

Now the matrix part. I have a matrix server running on matrix.domain.com with a public IP (not proxied). For the federation of matrix to work on the top level domain.com nginx proxy rules I have this:

location ^~ /.well-known/matrix {
                        proxy_pass https://matrix.domain.com/.well-known/matrix;
                        proxy_set_header X-Forwarded-For $remote_addr;
        }

Now with zoraxy I want to move the main site (domain.com) from nginx to zoraxy.

I can understand that I will need a new proxy rule on zoraxy for domain.com--->IP:2368 and also a redirection rule for www.domain.com to domain.com. Up to this I am ok. But I don't know how I will pass the extra location rule which is needed for the matrix.domain.com to work.

Is it going to be a virtual directory for example

domain.com/.well-known/matrix--->https://matrix.domain.com/.well-known/matrix

but then how I can configure the proxy_set_header for this virtual dir? Or there is another way to do it so I don't break the federation for matrix as soon as I change the IPs for the top level domain from nginx proxy to zoraxy proxy (they are on different systems).

I looked around and found a workaround for matrix in the wiki but I don't think it covers my setup.

Thanks for any ideas.

[baskinsy]

Ok it seems the solution is a redirection rule and not a virtual dir. Up to know it works and without the need of adding a header.