XMPP setup
This commit is contained in:
parent
46b52f7aaf
commit
f8db5d7e9a
|
@ -13,6 +13,7 @@
|
||||||
startup = startOnce [
|
startup = startOnce [
|
||||||
"firefox"
|
"firefox"
|
||||||
"element-desktop"
|
"element-desktop"
|
||||||
|
"dino"
|
||||||
"telegram-desktop"
|
"telegram-desktop"
|
||||||
"spotify"
|
"spotify"
|
||||||
"geary"
|
"geary"
|
||||||
|
|
|
@ -37,6 +37,7 @@
|
||||||
bspm
|
bspm
|
||||||
colmena
|
colmena
|
||||||
darktable
|
darktable
|
||||||
|
dino
|
||||||
element-desktop
|
element-desktop
|
||||||
exiftool
|
exiftool
|
||||||
ffmpeg
|
ffmpeg
|
||||||
|
|
|
@ -0,0 +1,29 @@
|
||||||
|
{ config, ... }:
|
||||||
|
let
|
||||||
|
ssl = {
|
||||||
|
cert = "${
|
||||||
|
config.security.acme.certs."technogothic.net".directory
|
||||||
|
}/fullchain.pem";
|
||||||
|
key = "${config.security.acme.certs."technogothic.net".directory}/key.pem";
|
||||||
|
};
|
||||||
|
in {
|
||||||
|
services.prosody = {
|
||||||
|
enable = true;
|
||||||
|
admins = [ "Agatha@argent.technogothic.net" ];
|
||||||
|
inherit ssl;
|
||||||
|
|
||||||
|
virtualHosts."argent.technogothic.net" = {
|
||||||
|
enabled = true;
|
||||||
|
domain = "argent.technogothic.net";
|
||||||
|
inherit ssl;
|
||||||
|
};
|
||||||
|
|
||||||
|
muc = [{ domain = "muc.argent.technogothic.net"; }];
|
||||||
|
uploadHttp.domain = "upload.argent.technogothic.net";
|
||||||
|
};
|
||||||
|
|
||||||
|
users.users."${config.services.prosody.user}".extraGroups =
|
||||||
|
[ "acme" "nginx" ];
|
||||||
|
|
||||||
|
networking.firewall.allowedTCPPorts = [ 5000 5222 5269 5281 ];
|
||||||
|
}
|
|
@ -14,6 +14,7 @@
|
||||||
../../common/fragments/nyandroid.nix
|
../../common/fragments/nyandroid.nix
|
||||||
../../common/fragments/postgres.nix
|
../../common/fragments/postgres.nix
|
||||||
../../common/fragments/prometheus_exporters.nix
|
../../common/fragments/prometheus_exporters.nix
|
||||||
|
../../common/fragments/prosody.nix
|
||||||
../../common/fragments/vsftpd.nix
|
../../common/fragments/vsftpd.nix
|
||||||
../../common/home_manager/common.nix
|
../../common/home_manager/common.nix
|
||||||
];
|
];
|
||||||
|
@ -89,7 +90,7 @@
|
||||||
group = "nginx";
|
group = "nginx";
|
||||||
};
|
};
|
||||||
|
|
||||||
security.acme.defaults.reloadServices = [ "nginx" "vsftpd" ];
|
security.acme.defaults.reloadServices = [ "nginx" "vsftpd" "prosody" ];
|
||||||
systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
|
systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
|
||||||
|
|
||||||
# Nginx
|
# Nginx
|
||||||
|
|
|
@ -39,6 +39,7 @@
|
||||||
rules = {
|
rules = {
|
||||||
"Element".desktop = "II";
|
"Element".desktop = "II";
|
||||||
"TelegramDesktop".desktop = "III";
|
"TelegramDesktop".desktop = "III";
|
||||||
|
"dino".desktop = "III";
|
||||||
"Spotify".desktop = "IV";
|
"Spotify".desktop = "IV";
|
||||||
"Geary".desktop = "V";
|
"Geary".desktop = "V";
|
||||||
"firefox" = {
|
"firefox" = {
|
||||||
|
|
|
@ -41,6 +41,7 @@
|
||||||
rules = {
|
rules = {
|
||||||
"Element".desktop = "I";
|
"Element".desktop = "I";
|
||||||
"TelegramDesktop".desktop = "II";
|
"TelegramDesktop".desktop = "II";
|
||||||
|
"dino".desktop = "II";
|
||||||
"Spotify".desktop = "III";
|
"Spotify".desktop = "III";
|
||||||
"Geary".desktop = "IV";
|
"Geary".desktop = "IV";
|
||||||
"firefox" = {
|
"firefox" = {
|
||||||
|
|
Loading…
Reference in New Issue