vueko: Add murmur

machines/vueko/configuration.nix

@@ -1,8 +1,18 @@
 { config, lib, pkgs, ... }:
+let
+  # any nixpkgs fetcher fails with infinite recursion when importing a module
+  # from it
+  infinisilSystem = builtins.fetchTarball {
+    url = "https://github.com/Infinisil/system/archive/91c5df20db68a995155218c5334db0e394185ca8.tar.gz";
+    sha256 = "1qlz96mla0rlsqax9r8pmwycy8f8byisvjxlk2545mpk9lp2yspv";
+  };
+in
 {
   imports = [
     ./hardware-configuration.nix
     ../../modules
+
+    "${infinisilSystem}/config/new-modules/murmur.nix"
   ];
 
   sbruder = {
@@ -47,6 +57,10 @@
 
         locations."/".proxyPass = "http://localhost:5232";
       };
+      "mumble.sbruder.de" = {
+        enableACME = true;
+        forceSSL = true;
+      };
     };
   };
 
@@ -70,4 +84,21 @@
       };
     };
   };
+
+  krops.secrets.murmur-superuser.owner = config.users.users.murmur.name;
+
+  services.murmur = {
+    enable = true;
+    openFirewall = true;
+    superuserPasswordFile = config.krops.secrets.murmur-superuser.path;
+    acmeDomain = "mumble.sbruder.de";
+    config = {
+      bandwidth = "128000";
+      obfuscate = true;
+      logfile = ""; # log to stdout
+
+      channelname = ''[ \\-=\\w\\#\\[\\]\\{\\}\\(\\)\\@\\|]+'';
+      username = "[-_a-zäöüß]+|SuperUser";
+    };
+  };
 }