felix/nixos
1
0
Fork 0
mirror of https://github.com/Stunkymonkey/nixos.git synced 2025-05-24 18:04:41 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

service/webserver: migrate nginx to caddy

Browse source
This commit is contained in:
Felix Buehler 2025-01-26 00:34:16 +01:00
parent 13470f55e4
commit 589714db4b
34 changed files with 347 additions and 688 deletions
Download patch file Download diff file Expand all files Collapse all files

38
modules/services/mumble-server/default.nix
View file

@ -7,11 +7,11 @@
}:
let
cfg = config.my.services.mumble-server;
domain = "voice.${config.networking.domain}";
inherit (config.networking) domain;
in
{
options.my.services.mumble-server = {
enable = lib.mkEnableOption "RSS-Bridge service";
enable = lib.mkEnableOption "mumble server service";
};
config = lib.mkIf cfg.enable {
@ -19,29 +19,29 @@ in
enable = true;
openFirewall = true;
welcometext = "Welcome to the Mumble-Server!";
sslCert = "/var/lib/acme/${domain}/fullchain.pem";
sslKey = "/var/lib/acme/${domain}/key.pem";
sslCert = "${config.security.acme.certs.${domain}.directory}/fullchain.pem";
sslKey = "${config.security.acme.certs.${domain}.directory}/key.pem";
};
services.nginx.virtualHosts.${domain}.enableACME = true;
security.acme.certs."${domain}" = {
group = "voice-buehler-rocks";
postRun = ''
if ${pkgs.systemd}/bin/systemctl is-active murmur.service; then
${pkgs.systemd}/bin/systemctl kill -s SIGUSR1 murmur.service
fi
'';
# create a separate certificate for the mumble server
security.acme = {
certs.${domain} = {
reloadServices = [ "murmur" ];
group = "caddyandmurmur";
};
};
users.groups."voice-buehler-rocks".members = [
users.groups.caddyandmurmur.members = [
"caddy"
"murmur"
"nginx"
];
my.services.prometheus.rules = {
mumble_not_running = {
condition = ''systemd_unit_state{name="murmur.service", state!="active"} > 0'';
description = "{{$labels.host}} should have a running {{$labels.name}}";
my.services = {
acme.enable = true;
prometheus.rules = {
mumble_not_running = {
condition = ''systemd_unit_state{name="murmur.service", state!="active"} > 0'';
description = "{{$labels.host}} should have a running {{$labels.name}}";
};
};
};
};