Syzygial/NixMachines
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

hippocampus: matrix: turn: secret perms

Browse Source
This commit is contained in:
David Crompton
2026-02-14 16:16:03 -05:00
parent 5bf80573dc
commit 6e44d99e07
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
machines/hippocampus/servers/public/matrix/turn.nix
View File

@@ -1,6 +1,11 @@
{ config, pkgs, lib, ... }: { { config, pkgs, lib, ... }: {
# TODO: Generate coturn secret # TODO: Generate coturn secret
sops.secrets.coturn-secret = {}; sops.secrets.coturn-secret = {
owner = "turnserver";
group = config.services.matrix-tuwunel.group;
};
# TODO: patch coturn service to specify user/group
systemd.services.coturn.serviceConfig.Group = lib.mkForce config.services.caddy.group;
services.coturn = { services.coturn = {
enable = true; enable = true;
realm = "turn.glia.club"; realm = "turn.glia.club";
@@ -19,7 +24,9 @@
# https://github.com/element-hq/element-ios/issues/2712 # https://github.com/element-hq/element-ios/issues/2712
# https://bugs.chromium.org/p/webrtc/issues/detail?id=11710 # https://bugs.chromium.org/p/webrtc/issues/detail?id=11710
extraConfig = '' extraConfig = ''
acme_ca https://acme.zerossl.com/v2/DV90 tls {
ca https://acme.zerossl.com/v2/DV90
}
respond "You ~~spin~~ turn me right round!" respond "You ~~spin~~ turn me right round!"
''; '';
}; };