mumble-server: move as new config

This commit is contained in:
Felix Buehler 2022-07-30 15:38:22 +02:00
parent 0f7689d3ef
commit 3ace595938
4 changed files with 40 additions and 27 deletions

View file

@ -1,26 +0,0 @@
{ config, pkgs, ... }:
{
services.murmur = {
enable = true;
# TODO enable in 22.11
#openFirewall = true;
welcometext = "Welcome to the Mumble-Server!";
sslCert = "/var/lib/acme/voice.buehler.rocks/fullchain.pem";
sslKey = "/var/lib/acme/voice.buehler.rocks/key.pem";
};
services.nginx.virtualHosts."voice.buehler.rocks".enableACME = true;
security.acme.certs."voice.buehler.rocks" = {
group = "voice-buehler-rocks";
postRun = ''
if ${pkgs.systemd}/bin/systemctl is-active murmur.service; then
${pkgs.systemd}/bin/systemctl kill -s SIGUSR1 murmur.service
fi
'';
};
users.groups."voice-buehler-rocks".members = [ "murmur" "nginx" ];
networking.firewall.allowedTCPPorts = [ config.services.murmur.port ];
networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
}

View file

@ -10,7 +10,6 @@
../modules/compression.nix
../modules/docker.nix
../modules/networkdecrypt.nix
../modules/service/mumble-server.nix
../modules/nix.nix
../modules/ssh.nix
../modules/users.nix

View file

@ -8,5 +8,7 @@ in
my.services = {
# RSS provider for websites that do not provide any feeds
rss-bridge.enable = true;
# Voice-chat server
mumble-server.enable = true;
};
}