mumble init

modules/server/services/mumble.nix

@@ -0,0 +1,29 @@
+{ config, lib, ... }:
+with lib;
+let cfg = config.void.server.services.mumble;
+in {
+  options.void.server.services.mumble = { enable = mkEnableOption false; };
+
+  config = mkIf cfg.enable {
+    services = {
+      murmur = {
+        enable = true;
+        port = 64738;
+        openFirewall = true;
+        welcomeText = "sako.lol!";
+        sslKey = "/var/lib/acme/mumble.sako.lol/key.pem";
+        sslCert = "/var/lib/acme/mumbe.sako.lol/fullchain.pem";
+        bandwidth = 72000;
+        clientCertRequired = true;
+      };
+    };
+
+    security.acme.certs."mumble.sako.lol" = {
+      group = config.services.murmur.group;
+      defaults.credentialsFile = "/srv/secrets/porkbun";
+      defaults.dnsProvider = "porkbun";
+      defaults.webroot = null;
+    };
+
+  };
+}