nixos

commit 12aeca20c123b0e15e823011adfeac8819c6281e
parent 95657b2db054929c089c176a89bcd967a4409d82
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat,  6 Apr 2024 20:54:05 +0200

Add soju

Diffstat:
M
nixos/worker-2/configuration.nix
 | 
8
++++++--
A
nixos/worker-2/soju.nix
 | 
27
+++++++++++++++++++++++++++

2 files changed, 33 insertions(+), 2 deletions(-)
diff --git a/nixos/worker-2/configuration.nix b/nixos/worker-2/configuration.nix
@@ -41,6 +41,8 @@ in {
     ../common/lib/personal_discourse.nix
     #../common/lib/opensearch.nix
     ./kubernetes.nix
+    "${unstable}/services/networking/soju.nix"
+    ./soju.nix
   ];
 
   nixpkgs = {
@@ -455,8 +457,10 @@ in {
     };
   };
 
-  security.acme.acceptTerms = true;
-  security.acme.defaults.email = "support@nordgedanken.dev";
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "support@nordgedanken.dev";
+  };
 
   environment.persistence."/persist" = {
     directories = [
diff --git a/nixos/worker-2/soju.nix b/nixos/worker-2/soju.nix
@@ -0,0 +1,27 @@
+{
+  lib,
+  pkgs,
+  config,
+  ...
+}: {
+  environment.persistence."/persist" = {
+    directories = [
+      "/var/lib/soju"
+    ];
+  };
+  services.soju = {
+    enable = true;
+    hostName = "soju.midnightthoughts.space";
+    enableMessageLogging = true;
+  };
+
+  security.acme.certs."soju.midnightthoughts.space" = {
+    group = services.soju.group;
+    reloadServices = ["soju"];
+    listenHTTP = ":1360";
+  };
+  networking.firewall.allowedTCPPorts = [
+    6697
+    1360
+  ];
+}