foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/plover: update Wezterm mux server config

Browse Source 
It's not fully working but we'll get there.
This commit is contained in:
Gabriel Arazas 2023-10-08 03:29:06 +08:00
parent 97916aaa05
commit a6fcc6eec6
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/plover/config/wezterm/config.lua
View File

@ -1,10 +1,12 @@
return {
tls_servers = {
-- These are expected to be imported through systemd LoadCredentials
-- directive.
{
pem_private_key = os.getenv("CREDENTIALS_DIRECTORY") .. "/key.pem",
pem_cert = os.getenv("CREDENTIALS_DIRECTORY") .. "/cert.pem",
pem_ca = os.getenv("CREDENTIALS_DIRECTORY") .. "/fullchain.pem",
bind_address = "@domain@:@port@",
bind_address = "@listen_address@",
},
},
}

9
hosts/plover/modules/services/wezterm-mux-server.nix
View File

@ -3,21 +3,22 @@
# We're setting up Wezterm mux server with TLS domains.
let
weztermDomain = "mux.${config.networking.domain}";
port = 9801;
listenAddress = "127.0.0.1:${builtins.toString port}";
configFile = pkgs.substituteAll {
src = ../../config/wezterm/config.lua;
domain = weztermDomain;
port = 9801;
listen_address = listenAddress;
};
in
{
services.wezterm-mux-server = {
enable = true;
inherit configFile;
user = "plover";
group = "users";
};
networking.firewall.allowedTCPPorts = [ port ];
systemd.services.wezterm-mux-server = {
requires = [ "acme-finished-${weztermDomain}.target" ];
environment.WEZTERM_LOG = "info";