diff options
| author | stuebinm | 2022-01-28 21:21:23 +0100 | 
|---|---|---|
| committer | stuebinm | 2022-01-28 23:22:34 +0100 | 
| commit | 995423b492e6ed9f4f9173ae55c5a3184b9f738d (patch) | |
| tree | 7326ffbfdba24fa15959fa3d735ca357b870bf7d | |
| parent | ca1fd2028e771583f57b1e4e09cbe7fa7a750ff9 (diff) | |
flora: add znc bouncer
| -rw-r--r-- | flora/configuration.nix | 1 | ||||
| -rw-r--r-- | flora/services/znc.nix | 43 | 
2 files changed, 44 insertions, 0 deletions
| diff --git a/flora/configuration.nix b/flora/configuration.nix index b2699b7..ada156e 100644 --- a/flora/configuration.nix +++ b/flora/configuration.nix @@ -12,6 +12,7 @@      #./services/picarones.nix      ./services/dockerhub.nix      ./services/blog.nix +    ./services/znc.nix    ];    # Use the GRUB 2 boot loader. diff --git a/flora/services/znc.nix b/flora/services/znc.nix new file mode 100644 index 0000000..e81bc65 --- /dev/null +++ b/flora/services/znc.nix @@ -0,0 +1,43 @@ +{ config, lib, pkgs, ... }: + +{ +  services.znc = { +    enable = true; +    mutable = false; +    useLegacyConfig = false; +    openFirewall = true; + +    config = { +      LoadModule = [ "adminlog" "webadmin" ]; +      Listener.l = { +        IPv4 = true; +        IPv6 = false; +        AllowIRC = true; +        AllowWeb = true; +        Port = 12345; +        SSL = true; +      }; +      User.stuebinm = { +        Admin = true; +        BindHost = "0.0.0.0"; +        LoadModule = [ "chansaver" "controlpanel" "sasl" ]; +        QuitMsg = "fell into a looping fixpoint operator"; +        RealName = "stuebinm"; +        Pass.password = { +          Method = "sha256"; +          Hash = "a0dd4be1f8959dc9c775a76779bfb8fab52e43b89bad24d85bdc28caa3499710"; +          Salt = "eNT_:x1SgMvQNJAW0J!Q"; +        }; +        Network.libera = { +          IRCConnectEnabled = true; +          LoadModule = [ "simple_away" "sasl" ]; +          Server = [ "irc.libera.chat +6697" ]; +          TrustAllCerts = false; +          TrustPKI = true; +        }; +      }; +    }; +  }; + +  networking.firewall.allowedTCPPorts = [ 12345 ]; +} | 
