mumble-server: move as new config

modules/services/mumble-server/default.nix

@@ -0,0 +1,38 @@
+# Have a good quality voice chat
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.my.services.mumble-server;
+  #domain = "voice.${config.networking.domain}";
+  domain = "voice.buehler.rocks";
+in
+{
+  options.my.services.mumble-server = {
+    enable = lib.mkEnableOption "RSS-Bridge service";
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.murmur = {
+      enable = true;
+      # TODO enable in 22.11
+      #openFirewall = true;
+      welcometext = "Welcome to the Mumble-Server!";
+      sslCert = "/var/lib/acme/${domain}/fullchain.pem";
+      sslKey = "/var/lib/acme/${domain}/key.pem";
+    };
+
+    services.nginx.virtualHosts.${domain}.enableACME = true;
+    security.acme.certs."${domain}" = {
+      group = "voice-buehler-rocks";
+      postRun = ''
+        if ${pkgs.systemd}/bin/systemctl is-active murmur.service; then
+          ${pkgs.systemd}/bin/systemctl kill -s SIGUSR1 murmur.service
+        fi
+      '';
+    };
+
+    users.groups."voice-buehler-rocks".members = [ "murmur" "nginx" ];
+
+    networking.firewall.allowedTCPPorts = [ config.services.murmur.port ];
+    networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
+  };
+}

nixos/modules/service/mumble-server.nix

@@ -1,26 +0,0 @@
-{ config, pkgs, ... }:
-{
-  services.murmur = {
-    enable = true;
-    # TODO enable in 22.11
-    #openFirewall = true;
-    welcometext = "Welcome to the Mumble-Server!";
-    sslCert = "/var/lib/acme/voice.buehler.rocks/fullchain.pem";
-    sslKey = "/var/lib/acme/voice.buehler.rocks/key.pem";
-  };
-
-  services.nginx.virtualHosts."voice.buehler.rocks".enableACME = true;
-  security.acme.certs."voice.buehler.rocks" = {
-    group = "voice-buehler-rocks";
-    postRun = ''
-      if ${pkgs.systemd}/bin/systemctl is-active murmur.service; then
-        ${pkgs.systemd}/bin/systemctl kill -s SIGUSR1 murmur.service
-      fi
-    '';
-  };
-
-  users.groups."voice-buehler-rocks".members = [ "murmur" "nginx" ];
-
-  networking.firewall.allowedTCPPorts = [ config.services.murmur.port ];
-  networking.firewall.allowedUDPPorts = [ config.services.murmur.port ];
-}

nixos/newton/configuration.nix

@@ -10,7 +10,6 @@
     ../modules/compression.nix
     ../modules/docker.nix
     ../modules/networkdecrypt.nix
-    ../modules/service/mumble-server.nix
     ../modules/nix.nix
     ../modules/ssh.nix
     ../modules/users.nix

nixos/newton/services.nix

@@ -8,5 +8,7 @@ in
   my.services = {
     # RSS provider for websites that do not provide any feeds
     rss-bridge.enable = true;
+    # Voice-chat server
+    mumble-server.enable = true;
   };
 }