home

commit 9142885615d78ee8bd065a6a6f655314bd9cb485
parent e929ae7c066c83781cf30c01a5ea8f434f81fb9e
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Wed, 20 Jul 2022 10:40:25 +0200

services: add a barrier service

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
M
systems/hosts/naruhodo.nix
 | 
1
+
A
systems/modules/services/barrier.nix
 | 
18
++++++++++++++++++
M
systems/modules/services/default.nix
 | 
1
+

3 files changed, 20 insertions(+), 0 deletions(-)
diff --git a/systems/hosts/naruhodo.nix b/systems/hosts/naruhodo.nix
@@ -149,6 +149,7 @@ in
       endpointPublicKey = endpointPublicKey;
     };
     syncthing.guiAddress = "${metadata.hosts.naruhodo.wireguard.addrs.v4}:8384";
+    barrier.enable = true;
   };
 
   virtualisation = {
diff --git a/systems/modules/services/barrier.nix b/systems/modules/services/barrier.nix
@@ -0,0 +1,18 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+let
+  cfg = config.services.barrier;
+in
+{
+  options = {
+    services.barrier = {
+      enable = mkEnableOption ''
+        Barrier is a software kvm
+      '';
+    };
+  };
+  config = mkIf cfg.enable {
+    networking.firewall.allowedTCPPorts = [ 24800 ];
+  };
+}
diff --git a/systems/modules/services/default.nix b/systems/modules/services/default.nix
@@ -1,5 +1,6 @@
 {
   imports = [
+    ./barrier.nix
     ./govanityurl.nix
     ./nix-binary-cache.nix
     ./wireguard.client.nix