hacc
/
haccfiles
8
0
Fork 1
Code Issues 1 Pull Requests Projects Releases Wiki Activity

hotfix: disable mumble website 

disable the mumble website because of cert permission issues causes by ad9c1f4481
nginx doesn't start because it can read the cert of the website
keep-around/6f0d8a6af9126b8993c9687ec415a657aec9434d
schweby 2022-01-17 22:37:43 +01:00
parent ad9c1f4481
commit 6f0d8a6af9
Signed by: moira
GPG Key ID: AF92FDD91CB44B2F
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
services/murmur.nix
View File

@ -28,16 +28,16 @@ in
networking.firewall.allowedTCPPorts = [ config.services.murmur.port ];
networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
services.nginx.virtualHosts =
let vhost = {
forceSSL = true;
enableACME = true;
root = mumblesite.outPath;
};
in {
"mumble.infra4future.de" = vhost;
"mumble.hacc.space" = vhost;
};
# services.nginx.virtualHosts =
# let vhost = {
# forceSSL = true;
# enableACME = true;
# root = mumblesite.outPath;
# };
# in {
# "mumble.infra4future.de" = vhost;
# "mumble.hacc.space" = vhost;
# };
# set ACLs so that the murmur user can read the certificates
security.acme.certs."mumble.hacc.space".postRun = "${pkgs.acl}/bin/setfacl -Rm u:murmur:rX /var/lib/acme/mumble.hacc.space";