motiejus/config
1
Fork 0
Code Packages Releases Activity

minor coturn and system updates

Browse Source
This commit is contained in:
Motiejus Jakštys 2023-03-04 10:10:31 +02:00
parent 04eb40fad6
commit 028fec142b
1 changed files with 23 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
configuration.nix
View File

@ -345,6 +345,7 @@ in {
} }
handle /_matrix/* { handle /_matrix/* {
encode gzip
reverse_proxy http://hel1-b.servers.jakst:8088 reverse_proxy http://hel1-b.servers.jakst:8088
} }
''; '';
@ -353,9 +354,10 @@ in {
coturn = { coturn = {
enable = true; enable = true;
no-tcp-relay = true;
min-port = 49152; min-port = 49152;
max-port = 49999; max-port = 49999;
no-tcp-relay = true;
realm = "turn.jakstys.lt";
cert = "/run/coturn/tls-cert.pem"; cert = "/run/coturn/tls-cert.pem";
pkey = "/run/coturn/tls-key.pem"; pkey = "/run/coturn/tls-key.pem";
static-auth-secret-file = "\${CREDENTIALS_DIRECTORY}/static-auth-secret"; static-auth-secret-file = "\${CREDENTIALS_DIRECTORY}/static-auth-secret";
@ -460,13 +462,8 @@ in {
postfix = { postfix = {
enable = true; enable = true;
enableSmtp = true; enableSmtp = true;
networks = [ networks = [ "127.0.0.1/8" "[::ffff:127.0.0.0]/104" "[::1]/128" tailscale_subnet.cidr ];
"127.0.0.1/8" hostname = "${config.networking.hostName}.${config.networking.domain}";
"[::ffff:127.0.0.0]/104"
"[::1]/128"
tailscale_subnet.cidr
];
hostname = "hel1-a.jakstys.lt";
relayHost = "smtp.sendgrid.net"; relayHost = "smtp.sendgrid.net";
relayPort = 587; relayPort = 587;
mapFiles = { mapFiles = {
@ -581,6 +578,23 @@ in {
]; ];
}; };
#matrix-synapse = {
# enable = true;
# settings.server_name = config.networking.domain;
# settings.listeners = [
# { port = 8008;
# bind_addresses = [ "::1" ];
# type = "http";
# tls = false;
# x_forwarded = true;
# resources = [ {
# names = [ "client" "federation" ];
# compress = false;
# } ];
# }
# ];
#};
cert-watcher = { cert-watcher = {
description = "Restart coturn when tls key/cert changes"; description = "Restart coturn when tls key/cert changes";
wantedBy = ["multi-user.target"]; wantedBy = ["multi-user.target"];
@ -624,6 +638,7 @@ in {
}; };
zfs-scrub.unitConfig.OnFailure = "unit-status-mail@zfs-scrub.service"; zfs-scrub.unitConfig.OnFailure = "unit-status-mail@zfs-scrub.service";
nixos-upgrade.unitConfig.OnFailure = "unit-status-mail@nixos-upgrade.service";
} // lib.mapAttrs' (name: value: { } // lib.mapAttrs' (name: value: {
name = "borgbackup-job-${name}"; name = "borgbackup-job-${name}";