fricloud/server-configs
2
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

gerd.murmur: removed subdomain

Browse source
This commit is contained in:
eyjhb 2024-08-10 17:49:20 +02:00
parent 303b66493b
commit 3c808fa3a7
No known key found for this signature in database
GPG key ID: 609F508E3239F920
1 changed files with 3 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
machines/gerd/services/murmur.nix
View file

@ -2,7 +2,7 @@
{ {
services.murmur = let services.murmur = let
certLocation = config.security.acme.certs."mumble.fricloud.dk".directory; certLocation = config.security.acme.certs."fricloud.dk".directory;
in { in {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
@ -18,24 +18,8 @@
# set superpassword on start from secrets # set superpassword on start from secrets
systemd.services.murmur.preStart = lib.mkAfter ''${config.services.murmur.package}/bin/mumble-server -ini /run/murmur/murmurd.ini -readsupw < ${config.age.secrets.murmur-superpassword.path}''; systemd.services.murmur.preStart = lib.mkAfter ''${config.services.murmur.package}/bin/mumble-server -ini /run/murmur/murmurd.ini -readsupw < ${config.age.secrets.murmur-superpassword.path}'';
services.nginx.virtualHosts."mumble.fricloud.dk" = { # add murmur user to domain group to access cert
forceSSL = true; users.groups.fricloud-domain.members = [ config.users.groups.murmur.name ];
enableACME = true;
root = pkgs.writeTextDir "index.html" ''
<html>
<head>
<title>Mumble server</title>
</head>
<body>
<p>This server runs a mumble server, enjoy!</p>
</body>
</html>
'';
};
# need to change group to murmur for cert + add nginx to murmur group to do HTTP ACME
security.acme.certs."mumble.fricloud.dk".group = config.users.groups.murmur.name;
users.users.nginx.extraGroups = [ config.users.groups.murmur.name ];
age.secrets = { age.secrets = {
murmur-env.owner = config.users.users.murmur.name; murmur-env.owner = config.users.users.murmur.name;