services/thelounge: move to parsons

keep-around/fd9e8941c77dea75114f839693f63a813b2d391b
hexchen 2021-08-07 12:27:49 +00:00
parent 84ac81435e
commit 4b11dbf1d4
3 changed files with 18 additions and 10 deletions

View File

@ -20,7 +20,6 @@
./services/monitoring.nix
./services/workadventure.nix
./services/mattermost.nix
./services/thelounge.nix
];
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;

View File

@ -9,7 +9,8 @@
((import sources.nix-hexchen) {}).profiles.nopersist
../../services/nextcloud
../../services/mattermost.nix
../../services/mattermost.nix
../../services/thelounge.nix
];
hexchen.encboot = {

View File

@ -1,4 +1,4 @@
{ config, lib, pkgs, ... }:
{ config, lib, pkgs, evalConfig, ... }:
let
# necessary since overlays won't propagate into the
@ -9,10 +9,20 @@ in
containers.thelounge = {
autoStart = true;
privateNetwork = true;
hostAddress = "192.168.100.70";
localAddress = "192.168.100.71";
hostAddress = "192.168.100.1";
localAddress = "192.168.100.4";
config = {pkgs, config, ...}: {
path = (evalConfig {hosts = {}; groups = {};} ({ config, lib, pkgs, profiles, modules, sources, ... }: {
boot.isContainer = true;
networking.useDHCP = false;
users.users.root.hashedPassword = "";
nixpkgs.config.allowUnfree = true;
networking.firewall.enable = false;
networking.defaultGateway = {
address = "192.168.100.1";
interface = "eth0";
};
services.thelounge = {
enable = true;
@ -30,7 +40,7 @@ in
# yes, please do actually check the cert …
rejectUnauthorized = true;
nick = "Guest%%%%";
join = "#thelounge";
join = "#hacc-webchat";
};
lockNetwork = true;
@ -55,9 +65,7 @@ in
# override the package we use
systemd.services.thelounge.serviceConfig.ExecStart =
pkgs.lib.mkForce "${thelounge}/bin/thelounge start";
networking.firewall.allowedTCPPorts = [ 9000 ];
};
})).config.system.build.toplevel;
};
services.nginx.virtualHosts."webchat.voc.hacc.space" = {