1 { lib, pkgs, config, ... }:
3 cfg = config.myServices.ejabberd;
7 ejabberd.enable = lib.mkOption {
11 Whether to enable ejabberd service.
16 config = lib.mkIf cfg.enable {
17 security.acme.certs = {
18 "ejabberd" = config.myServices.certificates.certConfig // {
21 domain = "eldiron.immae.eu";
24 systemctl restart ejabberd.service
28 "conference.immae.fr" = null;
29 "proxy.immae.fr" = null;
30 "pubsub.immae.fr" = null;
31 "upload.immae.fr" = null;
35 networking.firewall.allowedTCPPorts = [ 5222 5269 ];
36 myServices.websites.tools.im.enable = true;
37 systemd.services.ejabberd.postStop = ''
38 rm /var/log/ejabberd/erl_crash*.dump
42 dest = "ejabberd/psql.yml";
48 sql_server: "localhost"
49 sql_database: "${config.myEnv.jabber.postgresql.database}"
50 sql_username: "${config.myEnv.jabber.postgresql.user}"
51 sql_password: "${config.myEnv.jabber.postgresql.password}"
55 dest = "ejabberd/host.yml";
62 domain_certfile: "${config.security.acme.certs.ejabberd.directory}/full.pem"
64 ldap_servers: ["${config.myEnv.jabber.ldap.host}"]
66 ldap_rootdn: "${config.myEnv.jabber.ldap.dn}"
67 ldap_password: "${config.myEnv.jabber.ldap.password}"
68 ldap_base: "${config.myEnv.jabber.ldap.base}"
72 ldap_filter: "${config.myEnv.jabber.ldap.filter}"
76 users.users.ejabberd.extraGroups = [ "keys" ];
78 package = pkgs.ejabberd.override { withPgsql = true; };
82 ERLANG_NODE=ejabberd@localhost
84 configFile = pkgs.runCommand "ejabberd.yml" {
85 certificatePrivateKeyAndFullChain = "${config.security.acme.certs.ejabberd.directory}/full.pem";
86 certificateCA = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
87 sql_config_file = config.secrets.fullPaths."ejabberd/psql.yml";
88 host_config_file = config.secrets.fullPaths."ejabberd/host.yml";
90 substituteAll ${./ejabberd.yml} $out