milano: Host two Jami rendezvous points for internal communication.

This makes the 'rdv-guix-maintainers' as well as the
'rdv-guix-sysadmin' Jami rendezvous points accounts available for live
conference calls (audio or video).  The service runs in a Linux
container and can only be reached by the Jami contacts declared as
allowed.

* hydra/milano-guix-1.scm (operating-system)
[services]{jami-service-type}: New service.
This commit is contained in:
Maxim Cournoyer 2021-08-04 14:00:33 -04:00
parent 063ddc0837
commit c7d51c6427
No known key found for this signature in database
GPG Key ID: 1260E46482E63562
1 changed files with 45 additions and 1 deletions

View File

@ -10,7 +10,7 @@
(use-modules (gnu)
(guix gexp))
(use-service-modules databases getmail guix networking mcron ssh
virtualization web monitoring)
telephony virtualization web monitoring)
(use-package-modules certs screen tmux ssh linux)
;; The following definition are **almost** copied from dover.scm: a
@ -149,6 +149,50 @@
(non-derivation-substitute-urls
(list "https://bordeaux.guix.gnu.org")))))
(service jami-service-type
(jami-configuration
(accounts
;; Note: The following Jami accounts have
;; registered usernames that match their file
;; names (e.g. 'rdv-guix-maintainers' and
;; 'rdv-guix-sysadmin', for convenience. If
;; they are lost, new usernames will have to be
;; created; so it's wise to keep them backed up.
(list (jami-account
(archive "/etc/jami/rdv-guix-maintainers.gz")
(rendezvous-point? #t)
(allowed-contacts
'("d873d0ebe6c3b57f77a362fe867dd03a4f9efb76" ;apteryx
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;civodul
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;mbakke
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;mothacehe
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;nckx
)))
(jami-account
(archive "/etc/jami/rdv-guix-sysadmin.gz")
(rendezvous-point? #t)
(allowed-contacts
'(;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;andreas
"d873d0ebe6c3b57f77a362fe867dd03a4f9efb76" ;apteryx
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;bisculo
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;boskovits
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;cbaines
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;civodul
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;dannym
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;efraim
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;janneke
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;jlicht
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;lfam
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;marusich
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;mbakke
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;mhw
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;mothacehe
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;nckx
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;pelzfloria
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;rekado
;; "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" ;roptat
)))))))
(modify-services %base-services
(guix-service-type
config => (guix-configuration