summaryrefslogtreecommitdiff
path: root/modules/soju/sys.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/soju/sys.nix')
-rw-r--r--modules/soju/sys.nix47
1 files changed, 0 insertions, 47 deletions
diff --git a/modules/soju/sys.nix b/modules/soju/sys.nix
deleted file mode 100644
index 83c3560..0000000
--- a/modules/soju/sys.nix
+++ /dev/null
@@ -1,47 +0,0 @@
-{
- config,
- pkgs,
- lib,
- cfg,
- doctrine,
- ...
-}:
-with lib; {
- security.acme.certs."${cfg.fullyQualifiedDomain}" = {
- reloadServices = ["soju.service"];
- group = "soju";
- };
-
- networking.firewall.allowedTCPPorts = [cfg.port];
-
- services.soju = let
- sojuCertDir = config.security.acme.certs."${cfg.fullyQualifiedDomain}".directory;
- in {
- enable = true;
- hostName = "${cfg.fullyQualifiedDomain}";
- listen = ["ircs://[::]:${toString cfg.port}"];
- tlsCertificate = "${sojuCertDir}/fullchain.pem";
- tlsCertificateKey = "${sojuCertDir}/key.pem";
- };
-
- systemd.services.soju = {
- after = ["acme-${cfg.fullyQualifiedDomain}.service"];
- serviceConfig = {
- DynamicUser = mkForce false; # fuck dynamic users
- User = "soju";
- Group = "soju";
- ProtectSystem = "strict";
- ProtectHome = "read-only";
- PrivateTmp = true;
- RemoveIPC = true;
- };
- };
-
- users = {
- users.soju = {
- isSystemUser = true;
- group = "soju";
- };
- groups.soju = {};
- };
-}