emelie/nix-deploy
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Wiki Activity

Restructure folders, add mail host

Browse source 
The entire file structure has been reorganised into stable and unstable
to separate deployments running on either channel. A `mail` host running
Simple Nix Mailserver has also been added for testing to see if it's a
good alternative to soverin as well as SMTP for other services.
This commit is contained in:
Emelie Graven 2021-11-20 07:18:18 +01:00
parent 51ba0ae296
commit 90eb0c3708
Signed by: emelie
GPG key ID: C11123726DBB55A1
78 changed files with 535 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

25
config/hosts/grondahl/services/coturn.nix
View file

@ -1,25 +0,0 @@
{ config, ... }:
{
services.coturn = {
enable = true;
lt-cred-mech = true;
use-auth-secret = true;
static-auth-secret = builtins.toString config.secrets.files.turn_shared_secret.file;
realm = "turn.anarkafem.dev";
relay-ips = [
"107.189.30.157"
"2605:6400:30:ef32::1"
];
no-tcp-relay = true;
extraConfig = "
cipher-list=\"HIGH\"
no-loopback-peers
no-multicast-peers
";
secure-stun = true;
cert = "/var/lib/acme/anarkafem.dev/fullchain.pem";
pkey = "/var/lib/acme/anarkafem.dev/key.pem";
min-port = 49152;
max-port = 49999;
};
}