From 05809c0a2ef4dc4f94d59163cbbd52fd1de7a7a1 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sat, 26 Feb 2022 16:15:54 +0100
Subject: surtr: matrix: zerossl-cert for coturn

---
 hosts/surtr/matrix/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'hosts/surtr/matrix')

diff --git a/hosts/surtr/matrix/default.nix b/hosts/surtr/matrix/default.nix
index 1e923410..ce8a0831 100644
--- a/hosts/surtr/matrix/default.nix
+++ b/hosts/surtr/matrix/default.nix
@@ -31,7 +31,7 @@
       tls_private_key_path = "/run/credentials/matrix-synapse.service/synapse.li.key.pem";
       tls_dh_params_path = config.security.dhparams.params.matrix-synapse.path;
 
-      turn_uris = ["turn:turn.synapse.li?transport=udp" "turn:turn.synapse.li?transport=tcp"];
+      turn_uris = ["turns:turn.synapse.li?transport=udp" "turns:turn.synapse.li?transport=tcp"];
       turn_user_lifetime = "1h";
 
       extraConfigFiles = [
@@ -155,6 +155,7 @@
       "turn.synapse.li" = {
         zone = "synapse.li";
         certCfg = {
+          server = "https://acme.zerossl.com/v2/DV90";
           postRun = ''
             ${pkgs.systemd}/bin/systemctl try-restart coturn.service
           '';
-- 
cgit v1.2.3