l prism.r: add ssl for murmur

1 files changed, 6 insertions, 0 deletions

diff --git a/lass/2configs/murmur.nix b/lass/2configs/murmur.nix
index 7cc4051a8..42670dfbb 100644
--- a/lass/2configs/murmur.nix
+++ b/lass/2configs/murmur.nix
@@ -2,10 +2,16 @@
 {
   services.murmur = {
     enable = true;
+    allowHtml = false;
     bandwidth = 10000000;
     registerName = "lassul.us";
     autobanTime = 30;
+    sslCert = "/var/lib/acme/lassul.us/cert.pem";
+    sslKey = "/var/lib/acme/lassul.us/key.pem";
   };
+  users.groups.lasscert.members = [
+    "murmur"
+  ];
   krebs.iptables.tables.filter.INPUT.rules = [
     { predicate = "-p tcp --dport 64738"; target = "ACCEPT";}
     { predicate = "-p udp --dport 64738"; target = "ACCEPT";}