colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

servo: fix prosody

Browse Source 
well, i know it works with the systemd hardening disabled. i'm assuming it'll work with that enabled too, but don't want to redeploy/restart the service right now
This commit is contained in:
Colin
2025-08-29 19:46:42 +00:00
parent 13db8bec76
commit fea85f438b
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
hosts/by-name/servo/services/prosody/default.nix
View File

@@ -41,6 +41,10 @@
# - maybe i need to setup stun/turn # - maybe i need to setup stun/turn
# #
# TODO: # TODO:
# - MIGRATE TO NIXOS MODULE OPTIONS:
# - `services.prosody.ssl.`...
# - `services.prosody.log`
# - this decreases likelihood of breakage during future upgrades
# - enable push notifications (mod_cloud_notify) # - enable push notifications (mod_cloud_notify)
# - optimize coturn (e.g. move off of the VPN!) # - optimize coturn (e.g. move off of the VPN!)
# - ensure muc is working # - ensure muc is working
@@ -245,11 +249,11 @@ in
extraConfig = '' extraConfig = ''
local function readAll(file) local function readAll(file)
local f = assert(io.open(file, "rb")) local f = Lua.assert(Lua.io.open(file, "rb"))
local content = f:read("*all") local content = f:read("*all")
f:close() f:close()
-- remove trailing newline -- remove trailing newline
return string.gsub(content, "%s+", "") return Lua.string.gsub(content, "%s+", "")
end end
-- logging docs: -- logging docs:
@@ -261,9 +265,11 @@ in
} }
-- see: <https://prosody.im/doc/certificates#automatic_location> -- see: <https://prosody.im/doc/certificates#automatic_location>
-- try to solve: "certmanager: Error indexing certificate directory /etc/prosody/certs: cannot open /etc/prosody/certs: No such file or directory" -- try to solve: "certmanager: Error indexing certificate directory /run/prosody/certs: cannot open /run/prosody/certs: No such file or directory"
-- only, this doesn't work because prosody doesn't like acme's naming scheme -- only, this doesn't work because prosody doesn't like acme's naming scheme
-- certificates = "/var/lib/acme" -- certificates = "/var/lib/acme/uninsane.org"
-- instead, point to /etc/prosody/certs and configure symlinks into this dir (see nix config)
certificates = "/etc/prosody/certs"
c2s_direct_tls_ports = { 5223 } c2s_direct_tls_ports = { 5223 }
s2s_direct_tls_ports = { 5270 } s2s_direct_tls_ports = { 5270 }