about summary refs log tree commit diff
path: root/users/tazjin
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2020-07-08T22·03+0100
committertazjin <mail@tazj.in>2020-07-08T22·10+0000
commite2e15791854178ab36d90c19005c5994b95e21c8 (patch)
tree61d2685eeb46bb09e5aad29e4c06d1b09f8d6787 /users/tazjin
parentd6bf3207b090df7458075df06b561670b302ba0c (diff)
feat(tazjin/camden): Configure Quassel core instance r/1243
I'm not actually sure if this will apply cleanly, because the new
NixOS ACME module is kind of broken.

Change-Id: I39584333dbea0a5f7b72e68d5e9f752a4c31bfe6
Reviewed-on: https://cl.tvl.fyi/c/depot/+/957
Tested-by: BuildkiteCI
Reviewed-by: tazjin <mail@tazj.in>
Diffstat (limited to 'users/tazjin')
-rw-r--r--users/tazjin/nixos/camden/default.nix16
1 files changed, 16 insertions, 0 deletions
diff --git a/users/tazjin/nixos/camden/default.nix b/users/tazjin/nixos/camden/default.nix
index 8927b2e85a..d0d97e9621 100644
--- a/users/tazjin/nixos/camden/default.nix
+++ b/users/tazjin/nixos/camden/default.nix
@@ -18,6 +18,7 @@ in lib.fix(self: {
     "${depot.depotPath}/ops/nixos/clbot.nix"
     "${depot.depotPath}/ops/nixos/depot.nix"
     "${depot.depotPath}/ops/nixos/monorepo-gerrit.nix"
+    "${depot.depotPath}/ops/nixos/quassel.nix"
     "${depot.depotPath}/ops/nixos/smtprelay.nix"
     "${depot.depotPath}/ops/nixos/sourcegraph.nix"
     "${depot.depotPath}/ops/nixos/tvl-slapd/default.nix"
@@ -220,6 +221,13 @@ in lib.fix(self: {
       postRun = "systemctl reload nginx";
     };
 
+    certs."quassel.tazj.in" = {
+      webroot = "/var/lib/acme/challenge-quassel";
+      user = "nginx"; # required because of a bug in the ACME module
+      group = "quassel";
+      allowKeysForGroup = true;
+    };
+
     certs."tvl.fyi" = {
       user = "nginx";
       group = "nginx";
@@ -288,6 +296,14 @@ in lib.fix(self: {
     };
   };
 
+  services.depot.quassel = {
+    enable = true;
+    acmeHost = "quassel.tazj.in";
+    bindAddresses = [
+      "0.0.0.0"
+    ];
+  };
+
   # serve my website(s)
   services.nginx = {
     enable = true;