summaryrefslogtreecommitdiffstats
path: root/system/services/murmur
diff options
context:
space:
mode:
authorsils <sils@sils.li>2023-10-14 15:28:05 +0200
committersils <sils@sils.li>2023-10-14 15:28:05 +0200
commit04e4866a17853d583c943b52ec2b9c5e7518e4ae (patch)
treebd079002dbebd4fffc533596c3f4e5a99a6b3a56 /system/services/murmur
parentFix(system/services/etebase): Add proxy parameters (diff)
parentfix(system/services/mastodon): Correctly avoid string casts (diff)
downloadnixos-server-04e4866a17853d583c943b52ec2b9c5e7518e4ae.zip
Merge branch 'main' into etebase
Diffstat (limited to 'system/services/murmur')
-rw-r--r--system/services/murmur/default.nix41
1 files changed, 41 insertions, 0 deletions
diff --git a/system/services/murmur/default.nix b/system/services/murmur/default.nix
new file mode 100644
index 0000000..1dcd781
--- /dev/null
+++ b/system/services/murmur/default.nix
@@ -0,0 +1,41 @@
+{...}: let
+ murmurStore = "/var/lib/murmur";
+in {
+ services.murmur = {
+ enable = true;
+ openFirewall = true;
+ welcometext = ''
+ <b>You never get a second chance to make a first impression</b><br>
+
+ The entire team of [name of the company] is thrilled to welcome you on board. We hope you’ll do some amazing work here!
+ '';
+ sslKey = "${murmurStore}/key.pem";
+ sslCert = "${murmurStore}/fullchain.pem";
+
+ registerUrl = "vhack.eu";
+ registerName = "vhack";
+ registerHostname = "mumble.vhack.eu";
+ hostName = "mumble.vhack.eu";
+ clientCertRequired = true;
+ bandwidth = 7200000;
+ };
+
+ security.acme.certs.murmur = {
+ domain = "mumble.vhack.eu";
+ postRun =
+ /*
+ bash
+ */
+ ''
+ set -x
+ rm "${murmurStore}/key.pem"
+ rm "${murmurStore}/fullchain.pem"
+
+ cp key.pem "${murmurStore}";
+ cp fullchain.pem "${murmurStore}";
+
+ chown murmur:murmur "${murmurStore}/key.pem"
+ chown murmur:murmur "${murmurStore}/fullchain.pem"
+ '';
+ };
+}