From 20415a0448114033ba0d97f6b7d8b1a018e68528 Mon Sep 17 00:00:00 2001
From: Dmitry Voronin <hi@voronind.com>
Date: Sat, 7 Dec 2024 04:48:15 +0300
Subject: [PATCH] Home: Add cha.t

---
 host/x86_64-linux/home/Bind.nix    |  1 +
 host/x86_64-linux/home/Ddns.nix    |  1 +
 host/x86_64-linux/home/Mumble.nix  | 11 +++++++++++
 host/x86_64-linux/home/Network.nix |  4 ++++
 package/default.nix                |  1 +
 5 files changed, 18 insertions(+)
 create mode 100644 host/x86_64-linux/home/Mumble.nix

diff --git a/host/x86_64-linux/home/Bind.nix b/host/x86_64-linux/home/Bind.nix
index 7fd98ec9..de192a0d 100644
--- a/host/x86_64-linux/home/Bind.nix
+++ b/host/x86_64-linux/home/Bind.nix
@@ -17,6 +17,7 @@
 		(mkBind "jellyfin_cache" "/var/cache/jellyfin")
 		(mkBind "kavita"         "/var/lib/kavita")
 		(mkBind "letsencrypt"    "/etc/letsencrypt")
+		(mkBind "murmur"         "/var/lib/murmur")
 		(mkBind "nextcloud"      "/var/lib/nextcloud")
 		(mkBind "ovpn"           "/var/lib/ovpn")
 		(mkBind "paperless"      "/var/lib/paperless")
diff --git a/host/x86_64-linux/home/Ddns.nix b/host/x86_64-linux/home/Ddns.nix
index 5d4d2a4c..c97f31e3 100644
--- a/host/x86_64-linux/home/Ddns.nix
+++ b/host/x86_64-linux/home/Ddns.nix
@@ -11,6 +11,7 @@
 		in [
 			domain
 		] ++ map (sub: "${sub}.${domain}") [
+			"chat"
 			"cloud"
 			"git"
 			"mail"
diff --git a/host/x86_64-linux/home/Mumble.nix b/host/x86_64-linux/home/Mumble.nix
new file mode 100644
index 00000000..e4c9ed0e
--- /dev/null
+++ b/host/x86_64-linux/home/Mumble.nix
@@ -0,0 +1,11 @@
+{ ... }: {
+	services.murmur = {
+		enable = true;
+		clientCertRequired = true;
+		password = "bonjour";
+		port = 22666;
+		registerHostname = "chat.voronind.com";
+		sslCert = "/etc/letsencrypt/live/voronind.com/fullchain.pem";
+		sslKey  = "/etc/letsencrypt/live/voronind.com/privkey.pem";
+	};
+}
diff --git a/host/x86_64-linux/home/Network.nix b/host/x86_64-linux/home/Network.nix
index 055780fd..40714dcd 100644
--- a/host/x86_64-linux/home/Network.nix
+++ b/host/x86_64-linux/home/Network.nix
@@ -193,6 +193,10 @@ in {
 				# Terraria server.
 				ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22777
 
+				# Mumble.
+				ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22666
+				ip46tables -I INPUT -j ACCEPT -i ${wan} -p udp --dport 22666
+
 				# Public SSH access.
 				# ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22143
 			'';
diff --git a/package/default.nix b/package/default.nix
index 73c7229c..8c41ef8f 100644
--- a/package/default.nix
+++ b/package/default.nix
@@ -110,6 +110,7 @@
 		gparted               # GUI disk utility just in case.
 		jellyfin-media-player # Jellyfin client (self-hosted Netflix).
 		loupe                 # Image viewer.
+		mumble                # VoIP.
 		obs-studio            # Streaming/recording app.
 		onlyoffice-bin        # Office documents app suite.
 		remmina               # RDP app.