Henry-Hiles/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

element call done

Browse source
This commit is contained in:
Henry Hiles 2025-04-18 00:53:02 -04:00
parent 8f0c07c950
commit c160964c18
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
6 changed files with 42 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

34
modules/common/services/livekit.nix
View file

@ -6,14 +6,17 @@
}: let
cfg = config.services.livekit;
in {
meta.maintainers = [lib.maintainers.quadradical];
meta.maintainers = with lib.maintainers; [quadradical];
options.services.livekit = {
enable = lib.mkEnableOption "Livekit SFU";
enable = lib.mkEnableOption "Enable the livekit server";
package = lib.mkPackageOption pkgs "livekit" {};
keyFile = lib.mkOption {
type = lib.types.path;
description = "LiveKit key file, with syntax `LIVEKIT_KEYS=\"key: secret\"`;";
description = ''
LiveKit key file, with syntax `LIVEKIT_KEYS=\"key: secret\"`
The key and secret are used by other clients or services to connect to your Livekit instance.
'';
};
openFirewall = lib.mkOption {
@ -75,7 +78,6 @@ in {
serviceConfig = {
EnvironmentFile = cfg.keyFile;
DynamicUser = true;
User = "livekit";
LockPersonality = true;
MemoryDenyWriteExecute = true;
ProtectClock = true;
@ -101,18 +103,18 @@ in {
"~@privileged"
"~@resources"
];
CapabilityBoundingSet = [
"CAP_NET_BIND_SERVICE"
"CAP_NET_RAW"
];
ExecStart = "${cfg.package}/bin/livekit-server --config-body=${builtins.toJSON (builtins.toJSON {
port = cfg.port;
rtc = {
port_range_start = cfg.rtc.portRangeStart;
port_range_end = cfg.rtc.portRangeEnd;
use_external_ip = cfg.useExternalIP;
};
})}";
ExecStart = "${lib.getExe cfg.package} --config-body=${
builtins.toJSON (
builtins.toJSON {
port = cfg.port;
rtc = {
port_range_start = cfg.rtc.portRangeStart;
port_range_end = cfg.rtc.portRangeEnd;
use_external_ip = cfg.useExternalIP;
};
}
)
}";
Restart = "on-failure";
RestartSec = 5;
UMask = "077";

16
modules/common/services/lk-jwt-service.nix
View file

@ -14,14 +14,17 @@ in {
livekit = {
url = lib.mkOption {
type = lib.types.str;
description = "The URL that livekit runs on, prefixed with `ws://` or `wss://` (recommended).";
description = ''
The URL that livekit runs on, prefixed with `ws://` or `wss://` (recommended).
For example, `wss://example.com/livekit/sfu`
'';
};
keyFile = lib.mkOption {
type = lib.types.path;
description = ''
Path to a file showing LiveKit keys, where you must declare some of: `LIVEKIT_KEY`, `LIVEKIT_SECRET`, `LIVEKIT_KEY_FROM_FILE`, `LIVEKIT_SECRET_FROM_FILE`, and/or `LIVEKIT_KEY_FILE`.
For more information see <https://github.com/element-hq/lk-jwt-service>.
For more information, see <https://github.com/element-hq/lk-jwt-service#configuration>.
'';
};
};
@ -29,7 +32,7 @@ in {
port = lib.mkOption {
type = lib.types.port;
default = 8080;
description = "Port that lk-jwt-service should run on";
description = "Port that lk-jwt-service should listen on.";
};
};
@ -45,7 +48,6 @@ in {
serviceConfig = {
EnvironmentFile = cfg.livekit.keyFile;
DynamicUser = true;
User = "lk-jwt-service";
LockPersonality = true;
MemoryDenyWriteExecute = true;
ProtectClock = true;
@ -70,11 +72,7 @@ in {
"~@privileged"
"~@resources"
];
CapabilityBoundingSet = [
"CAP_NET_BIND_SERVICE"
"CAP_NET_RAW"
];
ExecStart = "${cfg.package}/bin/lk-jwt-service";
ExecStart = lib.getExe cfg.package;
Restart = "on-failure";
RestartSec = 5;
UMask = "077";