glennwso/nixos-selfhost
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity

defer tls/ssl to hyperserver

Browse source
This commit is contained in:
glenn 2025-01-14 15:17:47 +01:00
parent f57f9a37f6
commit 5f7cb33867
12 changed files with 50 additions and 82 deletions
Download patch file Download diff file Expand all files Collapse all files

22
coturn.nix
View file

@ -44,23 +44,22 @@
# open the firewall
networking.firewall = {
interfaces.enp2s0 = let
range = with config.services.coturn; [ {
from = min-port;
to = max-port;
} ];
in
{
range = with config.services.coturn; [
{
from = min-port;
to = max-port;
}
];
in {
allowedUDPPortRanges = range;
allowedUDPPorts = [ 3478 5349 ];
allowedTCPPortRanges = [ ];
allowedTCPPorts = [ 3478 5349 ];
allowedUDPPorts = [3478 5349];
allowedTCPPortRanges = [];
allowedTCPPorts = [3478 5349];
};
};
services.nginx = {
enable = true;
virtualHosts."turn.sondell.org" = {
forceSSL = true;
enableACME = true;
};
};
# get a certificate
@ -82,4 +81,3 @@
];
};
}