l prism.r: add ssl for murmur

This commit is contained in:
lassulus 2022-01-27 20:54:46 +01:00
parent 377ee283e3
commit 0501b46d13

View File

@ -2,10 +2,16 @@
{ {
services.murmur = { services.murmur = {
enable = true; enable = true;
allowHtml = false;
bandwidth = 10000000; bandwidth = 10000000;
registerName = "lassul.us"; registerName = "lassul.us";
autobanTime = 30; autobanTime = 30;
sslCert = "/var/lib/acme/lassul.us/cert.pem";
sslKey = "/var/lib/acme/lassul.us/key.pem";
}; };
users.groups.lasscert.members = [
"murmur"
];
krebs.iptables.tables.filter.INPUT.rules = [ krebs.iptables.tables.filter.INPUT.rules = [
{ predicate = "-p tcp --dport 64738"; target = "ACCEPT";} { predicate = "-p tcp --dport 64738"; target = "ACCEPT";}
{ predicate = "-p udp --dport 64738"; target = "ACCEPT";} { predicate = "-p udp --dport 64738"; target = "ACCEPT";}