hosts/mermet/prosody/biboumi.nix

   1 { pkgs, lib, config, ... }:
   2 let
   3   inherit (config) networking;
   4   inherit (config.services) biboumi;
   5   inherit (config.users) users;
   6 in
   7 {
   8 networking.nftables.ruleset = ''
   9   add rule inet filter net2fw tcp dport ${toString biboumi.settings.identd_port} counter accept comment "identd"
  10   add rule inet filter fw2net meta skuid ${users.biboumi.name} meta l4proto tcp counter accept comment "Biboumi"
  11 '';
  12 users.users.biboumi.isSystemUser = true;
  13 systemd.services.biboumi.after = ["prosody.service"];
  14 services.biboumi = {
  15   enable = true;
  16   settings = {
  17     hostname = "biboumi.${networking.domain}";
  18     password = "useless-secret-on-loopback";
  19     xmpp_server_ip = "127.0.0.1";
  20     port = 5347;
  21     admin = [
  22       "julm@${networking.domain}"
  23     ];
  24     #fixed_irc_server = "";
  25     persistent_by_default = true;
  26     realname_customization = true;
  27     realname_from_jid = false;
  28     log_level = 1;
  29   };
  30 };
  31 }