From e8d36fc259cbb9863f27e6195097299b081e526d Mon Sep 17 00:00:00 2001
From: moira <moira@moira.is>
Date: Thu, 3 Nov 2022 21:22:31 +0100
Subject: [PATCH] services/mumur: add creature comforts

murmur is now reloaded automagically after a cert update
also added mumble.infra4future.de as shared cert
---
 services/murmur.nix | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/services/murmur.nix b/services/murmur.nix
index 6ba6393..c38750e 100644
--- a/services/murmur.nix
+++ b/services/murmur.nix
@@ -6,7 +6,8 @@
   services.murmur = {
     enable = true;
     logDays = -1;
-    welcometext = "Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks.";
+    welcometext =
+      "Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks.";
     sslKey = "/var/lib/acme/mumble.hacc.space/key.pem";
     sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem";
     bandwidth = 128000;
@@ -16,8 +17,12 @@
   networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
 
   # the mumble cert has its own group so that both nginx and murmur can read it
-  users.groups.mumblecert = {};
-  security.acme.certs."mumble.hacc.space".group = "mumblecert";
+  users.groups.mumblecert = { };
+  security.acme.certs."mumble.hacc.space" = {
+    group = "mumblecert";
+    extraDomainNames = [ "mumble.infra4future.de" ];
+    reloadServices = [ "murmur" ];
+  };
   users.users.nginx.extraGroups = [ "mumblecert" ];
   users.users.murmur.extraGroups = [ "mumblecert" ];
 }