foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-02-07 06:19:00 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/plover: update Wezterm mux server configuration

Browse Source
This commit is contained in:
Gabriel Arazas 2023-07-28 08:53:32 +08:00
parent ac39b4cc58
commit 101f3771a1
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
2 changed files with 24 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/plover/config/wezterm/config.lua
View File

@ -3,5 +3,6 @@ return {
pem_private_key = os.getenv("CREDENTIALS_DIRECTORY") .. "/key.pem",
pem_cert = os.getenv("CREDENTIALS_DIRECTORY") .. "/cert.pem",
pem_ca = os.getenv("CREDENTIALS_DIRECTORY") .. "/fullchain.pem",
bind_address = "@host_address@:@port@",
}
}

16
hosts/plover/modules/services/wezterm-mux-server.nix
View File

@ -3,14 +3,25 @@
# We're setting up Wezterm mux server with TLS domains.
let
weztermDomain = "mux.${config.networking.domain}";
configFile = pkgs.substituteAll {
src = ../../config/wezterm/config.lua;
domain = weztermDomain;
port = 9801;
};
in
{
services.wezterm-mux-server = {
enable = true;
configFile = ../../config/wezterm/config.lua;
inherit configFile;
user = "plover";
group = "users";
};
systemd.services.wezterm-mux-server.serviceConfig = {
systemd.services.wezterm-mux-server = {
requires = [ "acme-finished-${weztermDomain}.target" ];
environment.WEZTERM_LOG = "info";
serviceConfig = {
LoadCredential = let
certDir = config.security.acme.certs."${weztermDomain}".directory;
credentialCertPath = path: "${path}:${certDir}/${path}";
@ -21,6 +32,7 @@ in
(credentialCertPath "fullchain.pem")
];
};
};
security.acme.certs."${weztermDomain}".postRun = ''
systemctl restart wezterm-mux-server.service