c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

jabber: modernize config

This commit is contained in:
Sandro - 2023-10-11 20:20:08 +02:00
parent f33ea01139
commit 7911e6e490
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 9 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
hosts/jabber/default.nix
View File

@ -163,8 +163,8 @@ in
'';
in
/* lua */ ''
legacy_ssl_ports = { 5223 }
legacy_ssl_ssl = {
c2s_direct_tls_ports = { 5223 }
c2s_direct_tls_ssl = {
key = "/var/lib/acme/${domain}/key.pem",
certificate = "/var/lib/acme/${domain}/fullchain.pem",
}
@ -193,21 +193,14 @@ in
http_upload_expire_after = 60 * 60 * 24 * 7 -- a week in seconds
cross_domain_bosh = true -- Allow access from scripts on any site with no proxy (requires a modern browser)
external_service_password = coturnPassword;
external_service_port = "3478";
external_service_transport = "udp";
external_service_type = "turn";
external_service_username = coturnUser;
external_services = {
["turn.${domain}"] = {
username = "${coturnUser}";
password = "${coturnPassword}";
port = "3478";
transport = "udp";
type = "turn";
};
["${zentralwerk.lib.config.site.hosts.upstream4.interfaces.up4-pppoe.upstream.staticIpv4Address}"] = {
username = "${coturnUser}";
password = "${coturnPassword}";
port = "3478";
transport = "udp";
type = "turn";
};
{ host = "turn.${domain}" }
{ host = zentralwerk.lib.dns.publicIPv4 }
}
-- File-transfer proxies are an outdated technology