hosts/mermet/prosody/biboumi.nix

   1 { pkgs, lib, config, ... }:
   2 let
   3   inherit (config) networking;
   4   inherit (config.services) biboumi;
   5   inherit (config.users) users groups;
   6 in
   7 {
   8 networking.nftables.ruleset = ''
   9   table inet filter {
  10     chain input-net {
  11       tcp dport ${toString biboumi.settings.identd_port} counter accept comment "biboumi: identd"
  12     }
  13     chain output-net {
  14       skuid ${users.biboumi.name} meta l4proto tcp counter accept comment "biboumi"
  15     }
  16   }
  17 '';
  18 users.users."biboumi".isSystemUser = true;
  19 users.users."biboumi".group = groups."biboumi".name;
  20 users.groups."biboumi" = {};
  21 systemd.services.biboumi.after = ["prosody.service"];
  22 services.biboumi = {
  23   enable = true;
  24   settings = {
  25     hostname = "biboumi.${networking.domain}";
  26     password = "useless-secret-on-loopback";
  27     xmpp_server_ip = "127.0.0.1";
  28     port = 5347;
  29     admin = [
  30       "julm@${networking.domain}"
  31     ];
  32     #fixed_irc_server = "";
  33     persistent_by_default = true;
  34     realname_customization = true;
  35     realname_from_jid = false;
  36     log_level = 1;
  37   };
  38 };
  39 }