prescientmoon/satellite
1
Fork 0
Code Activity

Configure pounce message saving

Browse source
This commit is contained in:
Matei Adriel 2024-01-31 23:22:55 +01:00
parent 9e6bb34179
commit 446d479c7a
No known key found for this signature in database
1 changed files with 23 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
hosts/nixos/lapetus/services/pounce.nix
View file

@ -1,23 +1,35 @@
{ config, ... }:
let makeNetworkConfig = host: port: join: secret: {
let
user = config.services.pounce.user;
# Helper template for networks
makeNetworkConfig = host: port: join: secret: {
content = ''
sasl-plain = prescientmoon:${config.sops.placeholder.${secret}}
nick = prescientmoon
save = /persist/var/lib/pounce/${host}
host = ${host}
port = ${toString port}
join = ${join}
'';
owner = config.services.pounce.user;
};
owner = user;
};
in
{
# Create save directory for messages
systemd.tmpfiles.rules = [ "d /persist/state/var/lib/pounce 0755 ${user} ${user} -" ];
# Generate cert
security.acme.certs."wildcard-irc.moonythm.dev" = {
group = config.services.pounce.user;
group = user;
domain = "*.irc.moonythm.dev";
};
# Handle secrets using sops
sops.secrets.tilde_irc_pass.sopsFile = ../secrets.yaml;
sops.templates."pounce-tilde.cfg" = makeNetworkConfig "eu.tilde.chat" 6697 "#meta" "tilde_irc_pass";
# Configure pounce
services.pounce = {
enable = true;
externalHost = "irc.moonythm.dev";