kopatz/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

coturn

Browse Source
This commit is contained in:
Kopatz
2026-03-07 10:52:06 +01:00
parent ae367e4afa
commit 535cfe6564
5 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
home-manager/dunst.nix
View File

@@ -20,7 +20,8 @@ in
transparency = -1; transparency = -1;
frame_color = "#1a1c1b"; frame_color = "#1a1c1b";
font = lib.mkDefault "Monospace 8"; font = lib.mkDefault "Monospace 8";
monitor = 1; #monitor = 1;
follow = "mouse";
}; };
urgency_normal = { urgency_normal = {

9
modules/services/coturn.nix
View File

@@ -25,6 +25,7 @@
enable = true; enable = true;
no-cli = true; no-cli = true;
#tls-listening-port = 5349; #tls-listening-port = 5349;
#no-tcp-relay = true;
listening-port = 3478; listening-port = 3478;
min-port = 49000; min-port = 49000;
max-port = 50000; max-port = 50000;
@@ -32,13 +33,15 @@
static-auth-secret-file = config.age.secrets.coturn-secret.path; static-auth-secret-file = config.age.secrets.coturn-secret.path;
relay-ips = [ relay-ips = [
"192.168.2.1" "192.168.2.1"
"192.168.0.10"
]; ];
listening-ips = [ listening-ips = [
"192.168.2.1" "192.168.2.1"
"192.168.0.10"
]; ];
realm = "kopatz.ddns.net"; realm = "kopatz.dev";
#cert = "${config.security.acme.certs."kopatz.ddns.net".directory}/full.pem"; cert = "${config.security.acme.certs."kopatz.dev".directory}/full.pem";
#pkey = "${config.security.acme.certs."kopatz.ddns.net".directory}/key.pem"; pkey = "${config.security.acme.certs."kopatz.dev".directory}/key.pem";
extraConfig = '' extraConfig = ''
no-sslv3 no-sslv3
no-tlsv1 no-tlsv1

1
modules/services/grafana.nix
View File

@@ -58,6 +58,7 @@ in
high_availability = false; high_availability = false;
}; };
security.admin_password = "$__file{${config.age.secrets.grafana-pw.path}}"; security.admin_password = "$__file{${config.age.secrets.grafana-pw.path}}";
security.secret_key = "dontcareaboutthis";
}; };
provision.alerting.contactPoints.path = config.age.secrets.grafana-contact-points.path; provision.alerting.contactPoints.path = config.age.secrets.grafana-contact-points.path;

1
systems/amd-server-vm/configuration.nix
View File

@@ -19,6 +19,7 @@
../../modules/services/samba.nix ../../modules/services/samba.nix
../../modules/services/ddclient-cloudflare.nix ../../modules/services/ddclient-cloudflare.nix
../../modules/services/grafana.nix ../../modules/services/grafana.nix
../../modules/services/coturn.nix
./disk-config.nix ./disk-config.nix
./mail.nix ./mail.nix
(modulesPath + "/installer/scan/not-detected.nix") (modulesPath + "/installer/scan/not-detected.nix")

3
systems/amd-server-vm/mail.nix
View File

@@ -171,6 +171,9 @@ in
selector = "mail"; selector = "mail";
socket = "local:/run/opendkim/opendkim.sock"; socket = "local:/run/opendkim/opendkim.sock";
}; };
nixpkgs.config.permittedInsecurePackages = [
"opendkim-2.11.0-Beta2"
];
services.rspamd = { services.rspamd = {
enable = true; enable = true;
postfix.enable = true; postfix.enable = true;