nixos

commit 1776e57cc26686f36ada226c37921fcf35c4aef1
parent 6657843866f654861f63adfe83caa5b04492ccda
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 17 Sep 2023 14:43:12 +0200

Allow irc

Diffstat:
M
nixos/worker-1/znc.nix
 | 
22
++++++++++++++++++++++

1 file changed, 22 insertions(+), 0 deletions(-)
diff --git a/nixos/worker-1/znc.nix b/nixos/worker-1/znc.nix
@@ -52,6 +52,28 @@
           };
         };
       };
+      streamConfig =
+        let
+          cert = config.security.acme.certs."${cfg.domainName}".directory + "/fullchain.pem";
+          certKey = config.security.acme.certs."${cfg.domainName}".directory + "/key.pem";
+          trustedCert = config.security.acme.certs."${cfg.domainName}".directory + "/chain.pem";
+        in
+        ''
+          upstream znc {
+            server [::1]:58457;
+          }
+          server {
+            listen 6697 ssl;
+            listen [::]:6697 ssl;
+            ssl_certificate ${cert};
+            ssl_certificate_key ${certKey};
+            ssl_trusted_certificate ${trustedCert};
+            proxy_pass znc;
+          }
+        '';
     };
   };
+  networking.firewall.allowedTCPPorts = [
+    6697
+  ];
 }