feat: foah ma ent

This commit is contained in:
s-prechtl 2025-12-10 14:20:39 +01:00
parent a02d6d7bba
commit 33b9d43254
3 changed files with 35 additions and 28 deletions

View file

@ -14,12 +14,15 @@
return 200 '${builtins.toJSON data}'; return 200 '${builtins.toJSON data}';
''; '';
turn = config.services.coturn; turn = config.services.coturn;
mautrix_whatsapp_old = import (pkgs.fetchFromGitHub { mautrix_whatsapp_old =
owner = "NixOS"; import (pkgs.fetchFromGitHub {
repo = "nixpkgs"; owner = "NixOS";
rev = "88e8a4036877dc2d328fd3e7cb4e732eb037e49c"; repo = "nixpkgs";
sha256 = "sha256-Rn+hvrEG0cK3pq9bGq0md0nDwOHR5p/awZeiQ12JDTs="; rev = "88e8a4036877dc2d328fd3e7cb4e732eb037e49c";
}) {}; sha256 = "sha256-Rn+hvrEG0cK3pq9bGq0md0nDwOHR5p/awZeiQ12JDTs=";
}) {
inherit (pkgs) system;
};
in { in {
age.secrets.matrix = { age.secrets.matrix = {
file = ../../secrets/matrix.age; file = ../../secrets/matrix.age;
@ -204,8 +207,8 @@ in {
settings.turn_user_lifetime = "1h"; settings.turn_user_lifetime = "1h";
}; };
# WARN: Remove once mautrix is updated # WARN: Remove once mautrix whatsapp is updated
nixpkgs.config.permittedInsecurePackages = [ mautrix_whatsapp_old.config.permittedInsecurePackages = [
"olm-3.2.16" "olm-3.2.16"
]; ];

View file

@ -281,10 +281,10 @@ in {
''; '';
virtualHosts."jellyseer.saberofxebec" = { virtualHosts."jellyseer.saberofxebec" = {
extraConfig = '' extraConfig = ''
reverse_proxy :5055 reverse_proxy :5055
tls internal tls internal
''; '';
serverAliases = [ "jellyseerr.saberofxebec" ]; serverAliases = ["jellyseerr.saberofxebec"];
}; };
virtualHosts."homarr.saberofxebec".extraConfig = '' virtualHosts."homarr.saberofxebec".extraConfig = ''
reverse_proxy :7575 reverse_proxy :7575

View file

@ -1,7 +1,7 @@
{config, ...}: let {config, ...}: let
accessoryStart = 20000; accessoryStart = 20000;
accessoryEnd = 20200; accessoryEnd = 20200;
in { in {
services.homebridge = { services.homebridge = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
@ -14,10 +14,14 @@
}; };
# 50202 LG Subbridge # 50202 LG Subbridge
networking.firewall.allowedTCPPorts = [ config.services.homebridge.settings.bridge.port 50202 ]; networking.firewall.allowedTCPPorts = [config.services.homebridge.settings.bridge.port 50202];
networking.firewall.allowedTCPPortRanges = [ {from = accessoryStart; to = accessoryEnd;} ]; networking.firewall.allowedTCPPortRanges = [
networking.firewall.allowedUDPPorts = [ 5353 ]; # mDNS / Bonjour {
from = accessoryStart;
to = accessoryEnd;
}
];
networking.firewall.allowedUDPPorts = [5353]; # mDNS / Bonjour
services.caddy = { services.caddy = {
enable = true; enable = true;
@ -28,18 +32,18 @@
}; };
security.sudo = { security.sudo = {
enable = true; enable = true;
extraRules = [ extraRules = [
{ {
users = [ "homebridge" ]; users = ["homebridge"];
commands = [ commands = [
{ {
command = "ALL"; command = "ALL";
options = [ "NOPASSWD" ]; options = ["NOPASSWD"];
} }
]; ];
} }
]; ];
}; };
} }