install quassel

home/apps/quassel.nix

@@ -0,0 +1 @@
+{ pkgs, ... }: { home.packages = with pkgs; [ quasselClient ]; }

hosts/hetzner-vm/hetzner-vm.nix

@@ -14,6 +14,7 @@
     hosts.hetzner-vm.services.invidious
     hosts.hetzner-vm.services.vault
     hosts.hetzner-vm.services.netdata
+    hosts.hetzner-vm.services.quassel
 
     (modulesPath + "/profiles/qemu-guest.nix")
   ];

hosts/hetzner-vm/services/quassel.nix

@@ -0,0 +1,24 @@
+{ ... }: {
+  services.quassel = {
+    enable = true;
+    interfaces = [ "0.0.0.0" ];
+  };
+
+  # needed so quassel can access SSL certs
+  # TODO: set up SSL
+  users.groups.acme.members = [ "quassel" ];
+
+  # Not gonna serve anything there but shrug.
+  services.nginx.virtualHosts."quassel.owo.monster" = {
+    forceSSL = true;
+    enableACME = true;
+  };
+
+  services.postgresql.ensureDatabases = [ "quassel" ];
+  services.postgresql.ensureUsers = [{
+    name = "quassel";
+    ensurePermissions."DATABASE quassel" = "ALL PRIVILEGES";
+  }];
+  services.postgresql.authentication = "host quassel quassel localhost trust";
+  networking.firewall.allowedTCPPorts = [ 4242 ];
+}

hosts/lappy/lappy.nix

@@ -34,6 +34,7 @@
       #home.reversing
       home.apps.vivaldi
       home.apps.telegram
+      home.apps.quassel
       #home.apps.osu-lazer
       home.programming
       #home.programming.languages.go