pennyworth: add weechat relay

2023-03-22 12:55:13 +01:00 · 2023-03-22 12:55:13 +01:00 · 44f4bbb79f
parent 25bee6dd76
commit 44f4bbb79f
1 changed files with 6 additions and 0 deletions
--- a/nixos/machines/pennyworth/default.nix
+++ b/nixos/machines/pennyworth/default.nix
@ -90,6 +90,12 @@ in {
    "media.yori.cc" = sslforward "http://${vpn.ips.frumar}:32001";
  };
  networking.firewall.allowedUDPPorts = [ 31790 ]; # wg
+  networking.firewall.allowedTCPPorts = [ 60307 ]; # weechat relay
+  security.acme.certs."pennyworth.yori.cc".postRun = ''
+    cat fullchain.pem key.pem > /home/yorick/.weechat/ssl/relay.pem
+    chown yorick:users /home/yorick/.weechat/ssl/relay.pem
+    chmod 0600 $_
+  '';
  networking.wireguard.interfaces.wg-y.peers = lib.mkForce (lib.mapAttrsToList
    (machine: publicKey: {
      inherit publicKey;