X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fejabberd%2Fdefault.nix;h=d051d790fd43c3a092ab9da56c3177d0fbce8972;hb=70f397239ef60b695b47e69bf96bcb8d50cb534c;hp=5e717f4dc01b07ce9ed8ede8694f1c482cb53d8c;hpb=3f453c7d8f79dcf2fba94287ec286d55eceb99d1;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/ejabberd/default.nix b/modules/private/ejabberd/default.nix index 5e717f4..d051d79 100644 --- a/modules/private/ejabberd/default.nix +++ b/modules/private/ejabberd/default.nix @@ -19,6 +19,7 @@ in user = "ejabberd"; group = "ejabberd"; domain = "eldiron.immae.eu"; + keyType = "rsa4096"; postRun = '' systemctl restart ejabberd.service ''; @@ -58,7 +59,7 @@ in text = '' host_config: "immae.fr": - domain_certfile: "${config.security.acme.directory}/ejabberd/full.pem" + domain_certfile: "${config.security.acme.certs.ejabberd.directory}/full.pem" auth_method: [ldap] ldap_servers: ["${config.myEnv.jabber.ldap.host}"] ldap_encrypt: tls @@ -66,8 +67,8 @@ in ldap_password: "${config.myEnv.jabber.ldap.password}" ldap_base: "${config.myEnv.jabber.ldap.base}" ldap_uids: - - "uid": "%u" - - "immaeXmppUid": "%u" + uid: "%u" + immaeXmppUid: "%u" ldap_filter: "${config.myEnv.jabber.ldap.filter}" ''; } @@ -81,7 +82,7 @@ in ERLANG_NODE=ejabberd@localhost ''; configFile = pkgs.runCommand "ejabberd.yml" { - certificatePrivateKeyAndFullChain = "${config.security.acme.directory}/ejabberd/full.pem"; + certificatePrivateKeyAndFullChain = "${config.security.acme.certs.ejabberd.directory}/full.pem"; certificateCA = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"; sql_config_file = config.secrets.fullPaths."ejabberd/psql.yml"; host_config_file = config.secrets.fullPaths."ejabberd/host.yml";