From f7287365ff9dd9c8bb5db040b27ea38c9ba9d5cd Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Sun, 7 Feb 2021 12:29:22 +0100
Subject: [PATCH] vueko: Add murmur

---
 machines/vueko/configuration.nix | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/machines/vueko/configuration.nix b/machines/vueko/configuration.nix
index c8ecf27..d412006 100644
--- a/machines/vueko/configuration.nix
+++ b/machines/vueko/configuration.nix
@@ -1,8 +1,18 @@
 { config, lib, pkgs, ... }:
+let
+  # any nixpkgs fetcher fails with infinite recursion when importing a module
+  # from it
+  infinisilSystem = builtins.fetchTarball {
+    url = "https://github.com/Infinisil/system/archive/91c5df20db68a995155218c5334db0e394185ca8.tar.gz";
+    sha256 = "1qlz96mla0rlsqax9r8pmwycy8f8byisvjxlk2545mpk9lp2yspv";
+  };
+in
 {
   imports = [
     ./hardware-configuration.nix
     ../../modules
+
+    "${infinisilSystem}/config/new-modules/murmur.nix"
   ];
 
   sbruder = {
@@ -47,6 +57,10 @@
 
         locations."/".proxyPass = "http://localhost:5232";
       };
+      "mumble.sbruder.de" = {
+        enableACME = true;
+        forceSSL = true;
+      };
     };
   };
 
@@ -70,4 +84,21 @@
       };
     };
   };
+
+  krops.secrets.murmur-superuser.owner = config.users.users.murmur.name;
+
+  services.murmur = {
+    enable = true;
+    openFirewall = true;
+    superuserPasswordFile = config.krops.secrets.murmur-superuser.path;
+    acmeDomain = "mumble.sbruder.de";
+    config = {
+      bandwidth = "128000";
+      obfuscate = true;
+      logfile = ""; # log to stdout
+
+      channelname = ''[ \\-=\\w\\#\\[\\]\\{\\}\\(\\)\\@\\|]+'';
+      username = "[-_a-zäöüß]+|SuperUser";
+    };
+  };
 }