colmena/cobalt/services/soju.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

{
  services.soju = {
    enable = true;
    extraGroups = [ "acme" ];
    hostName = "cobalt.sefidel.com";
    listen = [
      ":6697"
    ];
    tlsCertificate = "/var/lib/acme/sefidel.com/cert.pem";
    tlsCertificateKey = "/var/lib/acme/sefidel.com/key.pem";
  };

  networking.firewall.allowedTCPPorts = [ 6697 ];

  environment.persistence."/persist".directories = [
    "/var/lib/private/soju"
  ];

  # TODO: remove this once merged
  disabledModules = [ "services/networking/soju.nix" ];

  imports = [
    ./acme.nix
    ../overlays/soju.nix
  ];
}