From cba7f77f9863ae5cd03178b4282d09e25c660e87 Mon Sep 17 00:00:00 2001
From: kat witch <kat@kittywit.ch>
Date: Sun, 4 Apr 2021 22:19:47 +0100
Subject: [PATCH] services/murmur: Moved to voice.kittywit.ch

---
 services/murmur.nix | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/services/murmur.nix b/services/murmur.nix
index 6c4b8c47..56092d8b 100644
--- a/services/murmur.nix
+++ b/services/murmur.nix
@@ -1,21 +1,30 @@
 { config, pkgs, ... }:
 
 {
-  security.acme = { certs."kittywit.ch" = { group = "kittywit-ch"; }; };
-
-  users.groups."kittywit-ch".members = [ "murmur" "nginx" "syncplay" ];
-
   services.murmur = {
     enable = true;
 
     hostName = "voice.kittywit.ch";
 
     extraConfig = ''
-      sslCert=/var/lib/acme/kittywit.ch/fullchain.pem
-      sslKey=/var/lib/acme/kittywit.ch/key.pem
+      sslCert=/var/lib/acme/voice.kittywit.ch/fullchain.pem
+      sslKey=/var/lib/acme/voice.kittywit.ch/key.pem
     '';
   };
 
+  services.nginx.virtualHosts."voice.kittywit.ch" = {
+    enableACME = true;
+    forceSSL = true;
+  };
+  
+  users.groups."voice-cert".members = [ "nginx" "murmur" ];
+
+  security.acme.certs = {
+    "voice.kittywit.ch" = {
+      group = "voice-cert";
+    };
+  };
+
   deploy.tf.dns.records.kittywitch_voice = {
     tld = "kittywit.ch.";
     domain = "voice";