1 { lib, pkgs, config, ... }:
3 cfg = config.myServices.ejabberd;
7 ejabberd.enable = lib.mkOption {
11 Whether to enable ejabberd service.
16 config = lib.mkIf cfg.enable {
17 security.acme.certs = {
18 "ejabberd" = config.myServices.certificates.certConfig // {
20 domain = "eldiron.immae.eu";
23 systemctl restart ejabberd.service
25 extraDomainNames = [ "immae.fr" "conference.immae.fr" "proxy.immae.fr" "pubsub.immae.fr" "upload.immae.fr" ];
28 networking.firewall.allowedTCPPorts = [ 5222 5269 ];
29 myServices.websites.tools.im.enable = true;
30 systemd.services.ejabberd.postStop = ''
31 rm /var/log/ejabberd/erl_crash*.dump
34 "ejabberd/psql.yml" = {
40 sql_server: "localhost"
41 sql_database: "${config.myEnv.jabber.postgresql.database}"
42 sql_username: "${config.myEnv.jabber.postgresql.user}"
43 sql_password: "${config.myEnv.jabber.postgresql.password}"
46 "ejabberd/host.yml" = {
53 domain_certfile: "${config.security.acme.certs.ejabberd.directory}/full.pem"
55 ldap_servers: ["${config.myEnv.jabber.ldap.host}"]
57 ldap_rootdn: "${config.myEnv.jabber.ldap.dn}"
58 ldap_password: "${config.myEnv.jabber.ldap.password}"
59 ldap_base: "${config.myEnv.jabber.ldap.base}"
63 ldap_filter: "${config.myEnv.jabber.ldap.filter}"
67 users.users.ejabberd.extraGroups = [ "keys" ];
69 package = pkgs.ejabberd.override { withPgsql = true; };
73 ERLANG_NODE=ejabberd@localhost
75 configFile = pkgs.runCommand "ejabberd.yml" {
76 certificatePrivateKeyAndFullChain = "${config.security.acme.certs.ejabberd.directory}/full.pem";
77 certificateCA = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
78 sql_config_file = config.secrets.fullPaths."ejabberd/psql.yml";
79 host_config_file = config.secrets.fullPaths."ejabberd/host.yml";
81 substituteAll ${./ejabberd.yml} $out