summaryrefslogtreecommitdiff
path: root/ymir.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2015-09-25 16:15:40 +0200
committerGregor Kleen <gkleen@yggdrasil.li>2015-09-25 16:15:40 +0200
commitc032cf8bf7581ad6a1e1fb36c566b4577c8b8809 (patch)
treeb437187e448fec09b2cf0e71badefc122f012430 /ymir.nix
parentd0c0912b65de13f1c589798d25df63f2cf40bf1a (diff)
downloadnixos-c032cf8bf7581ad6a1e1fb36c566b4577c8b8809.tar
nixos-c032cf8bf7581ad6a1e1fb36c566b4577c8b8809.tar.gz
nixos-c032cf8bf7581ad6a1e1fb36c566b4577c8b8809.tar.bz2
nixos-c032cf8bf7581ad6a1e1fb36c566b4577c8b8809.tar.xz
nixos-c032cf8bf7581ad6a1e1fb36c566b4577c8b8809.zip
first work on prosody on ymir
Diffstat (limited to 'ymir.nix')
-rw-r--r--ymir.nix29
1 files changed, 29 insertions, 0 deletions
diff --git a/ymir.nix b/ymir.nix
index 34d5122d..3d1d8f9c 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -69,4 +69,33 @@
69 enable = true; 69 enable = true;
70 }; 70 };
71 71
72 services.prosody = {
73 enable = true;
74 admins = [
75 "gkleen@xmpp.li"
76 ];
77 allowRegistration = false;
78 extraConfig = ''
79 authentication = "pam"
80 '';
81 extraModules = [ "auth_pam"
82 ];
83
84 virtualHosts.default = {
85 enabled = true;
86 domain = "xmpp.li";
87 ssl = {
88 key = "certs/xmpp.li.key";
89 cert = "certs/xmpp.li.crt";
90 };
91 };
92 };
93 environment.etc."pam.d/xmpp" = {
94 text = ''
95 auth [success=1 default=ignore] pam_unix.so obscure sha512 nodelay
96 auth required pam_succeed_if.so user ingroup xmpp
97 auth requisite pam_deny.so
98 auth required pam_permit.so
99 '';
100 };
72} 101}