feat(ami): set up murmur

hosts/ami/acme.nix

@@ -6,6 +6,7 @@ _: {
       extraDomainNames = [
         "404.buffet.sh"
         "bitwarden.buffet.sh"
+        "rap.buffet.sh"
         "buffets.kitchen"
       ];
     };

hosts/ami/default.nix

@@ -15,6 +15,7 @@
     ./borg.nix
     ./disk-config.nix
     ./forgejo.nix
+    ./murmur.nix
     ./website.nix
 
     ../../users/maintainer

hosts/ami/murmur.nix

@@ -0,0 +1,15 @@
+_: {
+  services.murmur = {
+    enable = true;
+    openFirewall = true;
+    hostName = "";
+    welcometext = "Goooooood Morning New Eden!";
+    registerName = "new-eden";
+    password = "new-eden";
+    bandwidth = 128000;
+    sslKey = "/var/lib/acme/buffet.sh/key.pem";
+    sslCert = "/var/lib/acme/buffet.sh/fullchain.pem";
+  };
+
+  security.acme.certs."buffet.sh".postRun = "setfacl -Rm u:murmur:rX /var/lib/acme/buffet.sh";
+}