From 5a3a55e302b4a94c36233054523c48065be59ab6 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sun, 28 Mar 2021 22:46:55 +0000
Subject: [PATCH] bvm-prosody: add coturn

---
 ops/nixos/bvm-prosody/default.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/ops/nixos/bvm-prosody/default.nix b/ops/nixos/bvm-prosody/default.nix
index b4b739066d..7b941393f3 100644
--- a/ops/nixos/bvm-prosody/default.nix
+++ b/ops/nixos/bvm-prosody/default.nix
@@ -3,7 +3,10 @@
 # SPDX-License-Identifier: Apache-2.0
 
 { ... }:
-{
+let
+  inherit (depot.ops) secrets;
+  machineSecrets = secrets.machineSpecific.bvm-prosody;
+in {
   imports = [
     ../lib/bvm.nix
   ];
@@ -19,5 +22,12 @@
   };
   my.ip.tailscale = "100.86.22.44";
 
+  services.coturn = {
+    enable = true;
+    use-auth-secret = true;
+    realm = "turn.lukegb.com";
+    static-auth-secret = machineSecrets.turnSecret;
+  };
+
   system.stateVersion = "21.05";
 }