Screenstub derivation. Murmur.

config/hosts/athame/configuration.nix

@@ -17,6 +17,7 @@
     ./nextcloud.nix
     ./bitwarden.nix
     # comms
+    ./murmur.nix
     ./znc.nix
     ./weechat.nix
     ./matrix.nix
@@ -37,8 +38,8 @@
     interfaces.enp1s0.useDHCP = true;
   };
 
-  networking.firewall.allowedTCPPorts = [ 80 443 5160 5060 ];
-  networking.firewall.allowedUDPPorts = [ 5160 5060 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 5160 5060 64738 ];
+  networking.firewall.allowedUDPPorts = [ 5160 5060 64738 ];
   networking.firewall.allowedTCPPortRanges = [{
     from = 10000;
     to = 20000;

config/hosts/athame/murmur.nix

@@ -0,0 +1,23 @@
+{ config, pkgs, ... }:
+
+let secrets = (import ../../../secrets.nix);
+in {
+    security.acme = {
+        certs."kittywit.ch" = {
+            group = "kittywit-ch";
+        };
+    };
+
+    users.groups."kittywit-ch".members = ["murmur" "nginx"];
+
+    services.murmur = {
+        enable = true; 
+
+        hostName = "kittywit.ch";
+
+        extraConfig = ''
+            sslCert=/var/lib/acme/kittywit.ch/fullchain.pem
+            sslKey=/var/lib/acme/kittywit.ch/key.pem
+        '';
+    };
+}

config/hosts/samhain/configuration.nix

@@ -67,6 +67,7 @@ in {
   environment.systemPackages = [
     # pkgs.nur.repos.arc.packages.screenstub # for DDC/CI and input forwarding (currently disabled due to using changed source)
     pkgs.arc.pkgs.scream-arc # for audio forwarding
+    pkgs.screenstub # for input handling 
     pkgs.ddcutil # for diagnostics on DDC/CI
     pkgs.virt-manager # obvious reasons
   ];

config/private

@@ -1 +1 @@
-Subproject commit 933f5058c9942bfd51812cd0beaaf9b61a8205b7
+Subproject commit 49b90f76775092bf2545db515c15afe596e4d6eb