services/thelounge: move to parsons

hosts/hainich/configuration.nix

@@ -20,7 +20,6 @@
     ./services/monitoring.nix
     ./services/workadventure.nix
     ./services/mattermost.nix
-    ./services/thelounge.nix
   ];
   boot.loader.grub.enable = true;
   boot.loader.grub.version = 2;

hosts/parsons/configuration.nix

@@ -10,6 +10,7 @@
 
     ../../services/nextcloud
     ../../services/mattermost.nix
+    ../../services/thelounge.nix
   ];
 
   hexchen.encboot = {

services/thelounge.nix

@@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, pkgs, evalConfig, ... }:
 
 let
   # necessary since overlays won't propagate into the
@@ -9,10 +9,20 @@ in
   containers.thelounge = {
     autoStart = true;
     privateNetwork = true;
-    hostAddress = "192.168.100.70";
-    localAddress = "192.168.100.71";
+    hostAddress = "192.168.100.1";
+    localAddress = "192.168.100.4";
 
-    config = {pkgs, config, ...}: {
+    path = (evalConfig {hosts = {}; groups = {};} ({ config, lib, pkgs, profiles, modules, sources, ... }: {
+      boot.isContainer = true;
+      networking.useDHCP = false;
+      users.users.root.hashedPassword = "";
+
+      nixpkgs.config.allowUnfree = true;
+      networking.firewall.enable = false;
+      networking.defaultGateway = {
+        address = "192.168.100.1";
+        interface = "eth0";
+      };
 
       services.thelounge = {
         enable = true;
@@ -30,7 +40,7 @@ in
             # yes, please do actually check the cert …
             rejectUnauthorized = true;
             nick = "Guest%%%%";
-            join = "#thelounge";
+            join = "#hacc-webchat";
           };
           lockNetwork = true;
 
@@ -55,9 +65,7 @@ in
       # override the package we use
       systemd.services.thelounge.serviceConfig.ExecStart =
         pkgs.lib.mkForce "${thelounge}/bin/thelounge start";
-
-      networking.firewall.allowedTCPPorts = [ 9000 ];
-    };
+    })).config.system.build.toplevel;
   };
 
   services.nginx.virtualHosts."webchat.voc.hacc.space" = {