tlaternet/tlaternet-server
1
0
Fork 0
Code Issues11 Pull requests Releases Activity

Compare commits

..

2 commits
3c16172cfc ... 632edbdf09

Author SHA1 Message Date
Tristan Daniël Maat 632edbdf09
WIP: feat: Add minecraft server 2025-02-21 04:33:23 +08:00
Tristan Daniël Maat d09ac9a4bc
WIP: chore(coturn): Switch to letsencrypt certificate 
Fixes
2025-02-21 04:33:23 +08:00
2 changed files with 1 additions and 11 deletions
configuration
nginx.nix
services/conduit
default.nix

8
configuration/nginx.nix
View file

@ -53,7 +53,7 @@
"*.tlater.com" "*.tlater.com"
]; ];
dnsProvider = "porkbun"; dnsProvider = "porkbun";
group = "ssl-cert"; group = "nginx";
credentialFiles = { credentialFiles = {
PORKBUN_API_KEY_FILE = config.sops.secrets."porkbun/api-key".path; PORKBUN_API_KEY_FILE = config.sops.secrets."porkbun/api-key".path;
PORKBUN_SECRET_API_KEY_FILE = config.sops.secrets."porkbun/secret-api-key".path; PORKBUN_SECRET_API_KEY_FILE = config.sops.secrets."porkbun/secret-api-key".path;
@ -61,12 +61,6 @@
}; };
}; };
users.groups.ssl-cert = { };
systemd.services.nginx.serviceConfig.SupplementaryGroups = [
config.security.acme.certs."tlater.net".group
];
services.backups.acme = { services.backups.acme = {
user = "acme"; user = "acme";
paths = lib.mapAttrsToList ( paths = lib.mapAttrsToList (

4
configuration/services/conduit/default.nix
View file

@ -50,10 +50,6 @@ in
# See also https://gitlab.com/famedly/conduit/-/issues/314 # See also https://gitlab.com/famedly/conduit/-/issues/314
systemd.services.conduit.serviceConfig.EnvironmentFile = config.sops.secrets."turn/env".path; systemd.services.conduit.serviceConfig.EnvironmentFile = config.sops.secrets."turn/env".path;
systemd.services.coturn.serviceConfig.SupplementaryGroups = [
config.security.acme.certs."tlater.net".group
];
services.coturn = { services.coturn = {
enable = true; enable = true;
no-cli = true; no-cli = true;