Henry-Hiles/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

element call done

Browse source
This commit is contained in:
Henry Hiles 2025-04-18 00:53:02 -04:00
parent 8f0c07c950
commit c160964c18
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
6 changed files with 42 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

34
modules/common/services/livekit.nix
View file

@ -6,14 +6,17 @@
}: let
cfg = config.services.livekit;
in {
meta.maintainers = [lib.maintainers.quadradical];
meta.maintainers = with lib.maintainers; [quadradical];
options.services.livekit = {
enable = lib.mkEnableOption "Livekit SFU";
enable = lib.mkEnableOption "Enable the livekit server";
package = lib.mkPackageOption pkgs "livekit" {};
keyFile = lib.mkOption {
type = lib.types.path;
description = "LiveKit key file, with syntax `LIVEKIT_KEYS=\"key: secret\"`;";
description = ''
LiveKit key file, with syntax `LIVEKIT_KEYS=\"key: secret\"`
The key and secret are used by other clients or services to connect to your Livekit instance.
'';
};
openFirewall = lib.mkOption {
@ -75,7 +78,6 @@ in {
serviceConfig = {
EnvironmentFile = cfg.keyFile;
DynamicUser = true;
User = "livekit";
LockPersonality = true;
MemoryDenyWriteExecute = true;
ProtectClock = true;
@ -101,18 +103,18 @@ in {
"~@privileged"
"~@resources"
];
CapabilityBoundingSet = [
"CAP_NET_BIND_SERVICE"
"CAP_NET_RAW"
];
ExecStart = "${cfg.package}/bin/livekit-server --config-body=${builtins.toJSON (builtins.toJSON {
port = cfg.port;
rtc = {
port_range_start = cfg.rtc.portRangeStart;
port_range_end = cfg.rtc.portRangeEnd;
use_external_ip = cfg.useExternalIP;
};
})}";
ExecStart = "${lib.getExe cfg.package} --config-body=${
builtins.toJSON (
builtins.toJSON {
port = cfg.port;
rtc = {
port_range_start = cfg.rtc.portRangeStart;
port_range_end = cfg.rtc.portRangeEnd;
use_external_ip = cfg.useExternalIP;
};
}
)
}";
Restart = "on-failure";
RestartSec = 5;
UMask = "077";