peter/haccfiles
1
0
Fork 0
forked from hacc/haccfiles
Code Issues Pull requests Projects Releases Wiki Activity

hainich/murmur: add mumble.infra4future.de website

Browse source
This commit is contained in:
hexchen 2021-01-07 00:29:41 +00:00
parent 0539ebd097
commit 56ad50f3f4
1 changed files with 13 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
configuration/hosts/hainich/services/murmur.nix
View file

@ -4,7 +4,7 @@
services.murmur = { services.murmur = {
enable = true; enable = true;
logDays = -1; logDays = -1;
welcometext = "Welcome to mumble4future! Brought to you by infra4future"; welcometext = "Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks.";
sslKey = "/var/lib/acme/mumble.hacc.space/key.pem"; sslKey = "/var/lib/acme/mumble.hacc.space/key.pem";
sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem"; sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem";
bandwidth = 128000; bandwidth = 128000;
@ -14,13 +14,19 @@
networking.firewall.allowedTCPPorts = [ config.services.murmur.port ]; networking.firewall.allowedTCPPorts = [ config.services.murmur.port ];
networking.firewall.allowedUDPPorts = [ config.services.murmur.port ]; networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
services.nginx.virtualHosts."mumble.hacc.space" = { services.nginx.virtualHosts =
forceSSL = true; let vhost = {
enableACME = true; forceSSL = true;
locations."/" = { enableACME = true;
proxyPass = "https://stuebinm.4future.dev/mumble.infra4future.de/"; locations."/" = {
proxyPass = "https://stuebinm.4future.dev/mumble.infra4future.de/";
};
};
in {
"mumble.infra4future.de" = vhost;
"mumble.hacc.space" = vhost;
}; };
};
# set ACLs so that the murmur user can read the certificates # set ACLs so that the murmur user can read the certificates
security.acme.certs."mumble.hacc.space".postRun = "setfacl -Rm u:murmur:rX /var/lib/acme/mumble.hacc.space"; security.acme.certs."mumble.hacc.space".postRun = "setfacl -Rm u:murmur:rX /var/lib/acme/mumble.hacc.space";
} }