feat(host/granodomus-lima): add murmur server for mumble

hosts/granodomus-lima/default.nix

@@ -13,6 +13,7 @@ in {
   imports = [
     ../../hardware/netcup-vps-200-g10.nix
     ../../modules/nginx-reverse-proxy.nix
+    ./modules/murmur.nix
   ];
   config = {
     boot.loader.grub.enable = true;

hosts/granodomus-lima/modules/murmur.nix

@@ -0,0 +1,25 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  services.murmur = {
+    enable = true;
+    environmentFile = config.sops.secrets.murmur-environment.path;
+    registerHostname = "talk.tammena.me";
+    sslCa = builtins.toString (pkgs.writeText "ca.crt" (builtins.readFile ../../../secrets/ca.crt));
+    sslCert = builtins.toString (pkgs.writeText "talk-tammena-me.crt" (builtins.readFile ../../../secrets/pub/talk-tammena-me.crt));
+    sslKey = config.sops.secrets.murmur-ssl-key.path;
+    welcometext = "Willkommen auf meinem Discord";
+    # password = "$MURMURD_PASSWORD";
+    openFirewall = true;
+  };
+
+  # Secrets
+  sops.secrets = {
+    murmur-environment = {};
+    murmur-ssl-key = {
+      owner = config.users.users.murmur.name;
+    };
+  };
+}

secrets/hosts/granodomus-lima/secrets.yaml

@@ -1,4 +1,6 @@
 radicale-htpasswd: ENC[AES256_GCM,data:uzufMiUIsgeOyD3HzJ/+s1vDBL7+ApfP9x62ZE8BJqTk6cGFtMGs6ozCRAoO4ByPFMCd/M1KwBwjgvbfrBFgJl70,iv:Pez2f7a+Z4Y2sEAai3uGo2XNsuQunkqjcsuf5rdwTGQ=,tag:/N1OOj9jR7fMg5lqypdHFg==,type:str]
+murmur-environment: ENC[AES256_GCM,data:Jt4MVoeKvVk75v941s9trWatLHjNxdXFor5CZ0fYDBiGgdQnOuK+RQK/7ftxU4OFoypLK2TubQDFXo4Yk4TpcVmOVca/yPoPMXWbF5JxRyamZ1OlL8gJz9Rbs1/COJmmnyDpg1QgM76C1g==,iv:bh9I7DzkFM847LryeZs4mHWxx58Mr55PtHRy1pdI4Jw=,tag:LjIs5HVJwomUsThEhVst2A==,type:str]
+murmur-ssl-key: ENC[AES256_GCM,data:fT6Q86ulDTPowhWbtNAQxHyQfip2SdXG89UN6bX0bcczJC67edjdYgllOa8O6Y/6HSDFmfY5mEffdgO854yHyo3eBscpOA6vWGBHBkN9roRu6f/eJ4RScWEiHvKQNLXAYSW8zyts3xU/Q4c8QeQZkyiCpHUjWHcZ1gR91bjPKBASu9YynIYFSOma1Y/qDg8couRrkb/cE6JPxyaFstXGgA5XQ/5/TfK0nlH133HR08oW5cTcHX1rG043Ec6WVzbLSfI5ccR1I5ixg7wuTTZEfGG/aIiYgrZqwXHahiR2DMsiSBfknyP/Z89iVFuo2Nm3zdSM8u9o8HdygnpaY38u6V6l5RILHikTz+FA7YB50H6seiDHZ40CoJFSH6Jq1mqrMm+RC30WxbOlCfx9GGA=,iv:zdaMtC7KZLvFQMfJ6dvBfhhx5Zv7WESzaRWKv2EHWpI=,tag:X+seqkaWXiAmtA5u8Bd/XQ==,type:str]
 certificate-key-config-tammena-me: ENC[AES256_GCM,data:RwFQKI5dmX8pPZ8s+SYWdPoACU100pDT0GIiUEB75i57rba+YtuWAXP70IHhSoQEUC5kaN7EpoCfGURPsazgrLxS9yvbNC1Q1M2uYaTGjr/F6xiv//PDGqhfQIPuoszc4qA0t4Kfk+hdtn0yMPgDOKzAqrD+JKA1vM7aHq387HxAADvwacUhXNEw5fPJqx6V4y9SsPi7fVnptugiaSiP+c8TnhjRzJHtlSXx97DVR1XsrkcB/hsqASxpPJj8TSfwsDUZjqMoRF0uP/5rNiAQVegr+oOD5Phd4lDZylZkNApE2c4oDoJS9u5p6hPU3IDvWCcvEc0LJMGa8DsLKc965NcKmNBGVqFbqn564GH/66fBOGwH9oGFtydfyxV0PfhJdQwpqO3W93KGQ3l1WRo=,iv:M0+VJZjeIo5DMQRnA0J9Ipq5KNrIlAUjyTl0Dan/kXI=,tag:flla4mtzxNE5jVHobMvXLg==,type:str]
 certificate-key-todo-tammena-me: ENC[AES256_GCM,data:EV0Cm8MLfsi3ibcnDWSi/U6sYydLMT1aK7cqyDk/5N6Qws3ukc1djag+q3tM/vda2NSSvtRMYiivJE03KPSS2aWP3EcX2wubeDPcVubuOZH19yFVBu1oJ5EkPEmu5MdvU/GivH5qCuCQFq+PR+Pn3VVSmx2/AjowFPVnSzja+ChaNen2DpAI8rhwNGP1w13k41v9M1fx1UUM0IAyu9JfH3Tt34jnngYq3MnAIufW7ye2pGJRN5Mh9U19LRTuh5XPMHS9WaCvGhoKu2qWqcSJEvMX/EAZvRGGs/7IthhQlqyHHEn1mYeTooyRRO49+NLWBiCXKaTylwgjIXdO15p9vhyf9ZOru1qGGxKH5IOC1aGCJMZ5yNSc3F7ViXqmc0OOV553jhdvPoOWdJXwhD4=,iv:sCjOID+DR25tNfs/obykj76IPV9c22FMq52rLUenXMw=,tag:V4jlkyMRjpcxJkqior1LBg==,type:str]
 certificate-key-time-tammena-me: ENC[AES256_GCM,data:68Z156KSWb/CIj0vhlzLho9ubVyFhTaHNwc854mnvxyNxbEDFpLaM9LCMoegTCo+meG4pexyLp+zbW/M9Jkb3uEjKUyZ5HiGAIBzDST4ydRCCnapc/Kn9+kJiUWcbK3N92QkUfY/TTnLGI0+rNvesX6J67rNscmhAkkjgKj1b9sefOclKAhRPxDRrgnykUSNfk4Ln/BfKh/jhMvSRVOsn/v5/UZsJY1KCxAb1YzGflSZDGahp1waRK6Frn1mkZKFfzg1MYZkGMD9lCbtKAMYpPTgFyge1FBOcC7zlZxExrcDZhvtbXssn9TbHNAJ8oxD/D/SM5AhE6uzVaAFgLspVwlTp3NzLTgzZOdF2qSluc6+r/WBdogxovFfg/M1xBK3OBb1sCeqJCk2MsIqaUw=,iv:n/dZ9ylXatbb/sIXP75j3UY2KaDqo25teGb+l+R91qo=,tag:xJHydEMdCPElfs/FWxuhhw==,type:str]
@@ -20,8 +22,8 @@ sops:
             bjhicFhDaTE3azlZaDBpOC9IcXdPTlkKf2UFFz3kyHZKO8z2MvV44FnhnOUhNhS9
             5XgcabsK8Myuo+iON2SK32aX8oOKGxVSPXmk0e9RhRjVLpqDZAhoLA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-11-06T21:40:25Z"
-    mac: ENC[AES256_GCM,data:EWUrCAkuvXtXBfOzP+lXkNuDecJXqsipntnmGbNQgXizEIBRU4sg3c63OwPbHVnSn44zWtcFSS29eIxUHx8KsEwVd7iaCZsWdjllvWRWmqDBMn/WCa1wZtriGgXqoT+5Exf+oVU3pIhEg24VFqndDEn/RQqzjlgfIicIHtpqm2Q=,iv:IsW8bVrAZGuc3zWpUbw5WAAcBq9kU1zmzXwLlP+ee/Q=,tag:TZ+NLmAoF6m1lhefBN7JCw==,type:str]
+    lastmodified: "2024-04-08T10:11:47Z"
+    mac: ENC[AES256_GCM,data:AFcoeNlYGQpNjQuw0JZQWzeUMzHW78cnA5bOM3rtqUdW9UWUrdGKAMve7xvmo1sXFwE+tryuMPSiizO81Ul/ifc1DzwO0cXhDRuQczC6wB0zOq10+LMoomoDwj+71pkWZzlAGYpFtI9dipXQ2tjIV4j/wrOLQnqV7dLrXQdAGLo=,iv:hsObGKEa+5Rrub7qrM/84r4AXvN2gvnF5kTsLnhTp4k=,tag:EXBI0/or/LKeuZQTCcknvA==,type:str]
     pgp:
         - created_at: "2023-11-06T20:54:22Z"
           enc: |
@@ -55,4 +57,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: D5FEA546C06B3AEC97EB7F5A437B3369EAE401C4
     unencrypted_suffix: _unencrypted
-    version: 3.7.3
+    version: 3.8.1

secrets/pub/talk-tammena-me.crt

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

users/malte/default.nix

@@ -163,6 +163,7 @@ in {
           libnotify
           libreoffice
           mensa
+          mumble
           nickel
           patchelf
           pavucontrol