initial retooling

modules/coturn.nix

@@ -0,0 +1,54 @@
+{config, pkgs, lib, ...}:
+
+let
+	personalization = import ./personalization.nix;
+	
+	in
+lib.mkIf config.sovran_systemsOS.features.coturn {
+
+	systemd.services.coturn-helper = {
+	  
+	  script = ''
+	   
+	   systemctl restart coturn   
+	   
+	  '';
+
+	  unitConfig = {
+	  	Type = "simple";
+	    After = "btcpayserver.service";
+	    Requires = "network-online.target";
+	  };
+	   
+	  serviceConfig = {
+	    RemainAfterExit = "yes";
+	    Type = "oneshot";
+	  };
+
+	  wantedBy = [ "multi-user.target" ];
+	
+	};
+
+
+	services.coturn = {
+	
+	enable = true;
+	use-auth-secret = true;
+	static-auth-secret = "${personalization.coturn_static_auth_secret}";
+	realm = personalization.matrix_url;
+	cert = "/var/lib/coturn/${personalization.matrix_url}.crt.pem";
+	pkey = "/var/lib/coturn/${personalization.matrix_url}.key.pem";
+	min-port = 49152;
+	max-port = 65535;
+	listening-port = 5349;
+	no-cli = true;
+	extraConfig = ''
+		verbose
+		external-ip=${personalization.external_ip_secret}
+		stale-nonce
+		fingerprint
+	'';
+	
+	};
+
+}