char/topaz-flake

git clone https://git.t4t.associates/char/topaz-flake

Charlotte Somf991c53

main
branchesmainall refs →
1.2 KiB39 linesraw
1{ config, ... }: {
2  security.acme.certs."xmpp.t4t.associates" = {
3    group = "certs";
4    webroot = "/var/lib/acme/acme-challenge";
5    reloadServices = [ "prosody.service" ];
6    extraDomainNames = [ "upload.xmpp.t4t.associates" "conf.xmpp.t4t.associates" ];
7  };
8
9  services.prosody = {
10    enable = true;
11    admins = [ "char@xmpp.t4t.associates" ];
12    ssl.cert = "/var/lib/acme/xmpp.t4t.associates/fullchain.pem";
13    ssl.key = "/var/lib/acme/xmpp.t4t.associates/key.pem";
14
15    virtualHosts."xmpp.t4t.associates" = {
16      enabled = true;
17      domain = "xmpp.t4t.associates";
18      ssl = config.services.prosody.ssl;
19    };
20
21    muc = [{ domain = "conf.xmpp.t4t.associates"; }];
22    httpFileShare.domain = "upload.xmpp.t4t.associates";
23
24    # modules = {
25    #   roster = true; tls = true; dialback = true; disco = true;
26    #   carbons = true; pep = true; blocklist = true; mam = true;
27    #   smacks = true; csi_simple = true; cloud_notify = true;
28    #   bosh = true; websocket = true; admin_adhoc = true;
29    #   vcard_legacy = true; ping = true; register = false;
30    # };
31
32    extraConfig = ''
33      c2s_require_encryption = true
34      s2s_require_encryption = true
35      http_upload_file_size_limit = 10485760
36      archive_expires_after = "4w"
37    '';
38  };
39}