From 0501b46d1358e24ba077c020b2c8dcbb011f101a Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Thu, 27 Jan 2022 20:54:46 +0100
Subject: l prism.r: add ssl for murmur

---
 lass/2configs/murmur.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lass/2configs/murmur.nix b/lass/2configs/murmur.nix
index 7cc4051a..42670dfb 100644
--- a/lass/2configs/murmur.nix
+++ b/lass/2configs/murmur.nix
@@ -2,10 +2,16 @@
 {
   services.murmur = {
     enable = true;
+    allowHtml = false;
     bandwidth = 10000000;
     registerName = "lassul.us";
     autobanTime = 30;
+    sslCert = "/var/lib/acme/lassul.us/cert.pem";
+    sslKey = "/var/lib/acme/lassul.us/key.pem";
   };
+  users.groups.lasscert.members = [
+    "murmur"
+  ];
   krebs.iptables.tables.filter.INPUT.rules = [
     { predicate = "-p tcp --dport 64738"; target = "ACCEPT";}
     { predicate = "-p udp --dport 64738"; target = "ACCEPT";}
-- 
cgit v1.2.3