hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

services/mumur: add creature comforts

Browse source 
murmur is now reloaded automagically after a cert update
also added mumble.infra4future.de as shared cert
This commit is contained in:
Moira 2022-11-03 21:22:31 +01:00
parent 2e92960390
commit e8d36fc259
Signed by: moira
GPG key ID: AF92FDD91CB44B2F
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
services/murmur.nix
View file

@ -6,7 +6,8 @@
services.murmur = { services.murmur = {
enable = true; enable = true;
logDays = -1; logDays = -1;
welcometext = "Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks."; welcometext =
"Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks.";
sslKey = "/var/lib/acme/mumble.hacc.space/key.pem"; sslKey = "/var/lib/acme/mumble.hacc.space/key.pem";
sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem"; sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem";
bandwidth = 128000; bandwidth = 128000;
@ -16,8 +17,12 @@
networking.firewall.allowedUDPPorts = [ config.services.murmur.port ]; networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
# the mumble cert has its own group so that both nginx and murmur can read it # the mumble cert has its own group so that both nginx and murmur can read it
users.groups.mumblecert = {}; users.groups.mumblecert = { };
security.acme.certs."mumble.hacc.space".group = "mumblecert"; security.acme.certs."mumble.hacc.space" = {
group = "mumblecert";
extraDomainNames = [ "mumble.infra4future.de" ];
reloadServices = [ "murmur" ];
};
users.users.nginx.extraGroups = [ "mumblecert" ]; users.users.nginx.extraGroups = [ "mumblecert" ];
users.users.murmur.extraGroups = [ "mumblecert" ]; users.users.murmur.extraGroups = [ "mumblecert" ];
} }