Home: Add cha.t

host/x86_64-linux/home/Bind.nix

@@ -17,6 +17,7 @@
 		(mkBind "jellyfin_cache" "/var/cache/jellyfin")
 		(mkBind "kavita"         "/var/lib/kavita")
 		(mkBind "letsencrypt"    "/etc/letsencrypt")
+		(mkBind "murmur"         "/var/lib/murmur")
 		(mkBind "nextcloud"      "/var/lib/nextcloud")
 		(mkBind "ovpn"           "/var/lib/ovpn")
 		(mkBind "paperless"      "/var/lib/paperless")

host/x86_64-linux/home/Ddns.nix

@@ -11,6 +11,7 @@
 		in [
 			domain
 		] ++ map (sub: "${sub}.${domain}") [
+			"chat"
 			"cloud"
 			"git"
 			"mail"

host/x86_64-linux/home/Mumble.nix

@@ -0,0 +1,11 @@
+{ ... }: {
+	services.murmur = {
+		enable = true;
+		clientCertRequired = true;
+		password = "bonjour";
+		port = 22666;
+		registerHostname = "chat.voronind.com";
+		sslCert = "/etc/letsencrypt/live/voronind.com/fullchain.pem";
+		sslKey  = "/etc/letsencrypt/live/voronind.com/privkey.pem";
+	};
+}

host/x86_64-linux/home/Network.nix

@@ -193,6 +193,10 @@ in {
 				# Terraria server.
 				ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22777
 
+				# Mumble.
+				ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22666
+				ip46tables -I INPUT -j ACCEPT -i ${wan} -p udp --dport 22666
+
 				# Public SSH access.
 				# ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22143
 			'';

package/default.nix

@@ -110,6 +110,7 @@
 		gparted               # GUI disk utility just in case.
 		jellyfin-media-player # Jellyfin client (self-hosted Netflix).
 		loupe                 # Image viewer.
+		mumble                # VoIP.
 		obs-studio            # Streaming/recording app.
 		onlyoffice-bin        # Office documents app suite.
 		remmina               # RDP app.