forked from hacc/haccfiles
services/mumur: add creature comforts
murmur is now reloaded automagically after a cert update also added mumble.infra4future.de as shared cert
This commit is contained in:
parent
2e92960390
commit
e8d36fc259
1 changed files with 8 additions and 3 deletions
|
@ -6,7 +6,8 @@
|
||||||
services.murmur = {
|
services.murmur = {
|
||||||
enable = true;
|
enable = true;
|
||||||
logDays = -1;
|
logDays = -1;
|
||||||
welcometext = "Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks.";
|
welcometext =
|
||||||
|
"Welcome to mumble4future! Brought to you by infra4future. The server is now reachable under mumble.hacc.space, please update your bookmarks.";
|
||||||
sslKey = "/var/lib/acme/mumble.hacc.space/key.pem";
|
sslKey = "/var/lib/acme/mumble.hacc.space/key.pem";
|
||||||
sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem";
|
sslCert = "/var/lib/acme/mumble.hacc.space/fullchain.pem";
|
||||||
bandwidth = 128000;
|
bandwidth = 128000;
|
||||||
|
@ -17,7 +18,11 @@
|
||||||
|
|
||||||
# the mumble cert has its own group so that both nginx and murmur can read it
|
# the mumble cert has its own group so that both nginx and murmur can read it
|
||||||
users.groups.mumblecert = { };
|
users.groups.mumblecert = { };
|
||||||
security.acme.certs."mumble.hacc.space".group = "mumblecert";
|
security.acme.certs."mumble.hacc.space" = {
|
||||||
|
group = "mumblecert";
|
||||||
|
extraDomainNames = [ "mumble.infra4future.de" ];
|
||||||
|
reloadServices = [ "murmur" ];
|
||||||
|
};
|
||||||
users.users.nginx.extraGroups = [ "mumblecert" ];
|
users.users.nginx.extraGroups = [ "mumblecert" ];
|
||||||
users.users.murmur.extraGroups = [ "mumblecert" ];
|
users.users.murmur.extraGroups = [ "mumblecert" ];
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue