From 8aadbf24e52201e399f3cdc3986c6d46698eb762 Mon Sep 17 00:00:00 2001
From: buffet <dev@buffet.sh>
Date: Wed, 1 May 2024 14:30:23 +0200
Subject: [PATCH] feat(ami): set up murmur

---
 hosts/ami/acme.nix    |  1 +
 hosts/ami/default.nix |  1 +
 hosts/ami/murmur.nix  | 15 +++++++++++++++
 3 files changed, 17 insertions(+)
 create mode 100644 hosts/ami/murmur.nix

diff --git a/hosts/ami/acme.nix b/hosts/ami/acme.nix
index 231d63c..713030f 100644
--- a/hosts/ami/acme.nix
+++ b/hosts/ami/acme.nix
@@ -6,6 +6,7 @@ _: {
       extraDomainNames = [
         "404.buffet.sh"
         "bitwarden.buffet.sh"
+        "rap.buffet.sh"
         "buffets.kitchen"
       ];
     };
diff --git a/hosts/ami/default.nix b/hosts/ami/default.nix
index 17fcd41..f9d2d39 100644
--- a/hosts/ami/default.nix
+++ b/hosts/ami/default.nix
@@ -15,6 +15,7 @@
     ./borg.nix
     ./disk-config.nix
     ./forgejo.nix
+    ./murmur.nix
     ./website.nix
 
     ../../users/maintainer
diff --git a/hosts/ami/murmur.nix b/hosts/ami/murmur.nix
new file mode 100644
index 0000000..3ab3ad0
--- /dev/null
+++ b/hosts/ami/murmur.nix
@@ -0,0 +1,15 @@
+_: {
+  services.murmur = {
+    enable = true;
+    openFirewall = true;
+    hostName = "";
+    welcometext = "Goooooood Morning New Eden!";
+    registerName = "new-eden";
+    password = "new-eden";
+    bandwidth = 128000;
+    sslKey = "/var/lib/acme/buffet.sh/key.pem";
+    sslCert = "/var/lib/acme/buffet.sh/fullchain.pem";
+  };
+
+  security.acme.certs."buffet.sh".postRun = "setfacl -Rm u:murmur:rX /var/lib/acme/buffet.sh";
+}