WIP: Livekit

2026-05-03 12:38:31 +02:00
parent 5cee5f217e
commit 61e8a1e037
2 changed files with 13 additions and 2 deletions
@@ -4,7 +4,7 @@
    ./hardware-configuration.nix
    ../../nixos/roles/nginx.nix
    ../../nixos/roles/matrix/livekit.nix
-    ../../nixos/roles/jitsi.nix
+    #    ../../nixos/roles/jitsi.nix
  ];

  networking = {
@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, lib, ... }:
 {
  sops.secrets.livekit_key_sfu = { };

@@ -27,4 +27,15 @@
      };
    };
  };
+  networking.firewall.allowedTCPPorts = [ 7881 ];
+
+  systemd.services.livekit.serviceConfig = {
+    PrivateUsers = lib.mkForce false;
+    RestrictAddressFamilies = lib.mkForce [
+      "AF_INET"
+      "AF_INET6"
+      "AF_NETLINK"
+      "AF_UNIX"
+    ];
+  };
 }