some jitsi shit

nixos/system/neuro/default.nix

@@ -40,6 +40,10 @@ in self.lib.nixpkgs-lib.nixosSystem {
       "libcusparse"
       "cudnn"
     ];
+    # jitsi-meet depends on libolm which is marked insecure (CVE-2024-4519x)
+    config.permittedInsecurePackages = [
+      "jitsi-meet-1.0.8792"
+    ];
   };
   modules = [
     { networking.hostName = name; }

nixos/system/neuro/neuro.nix

@@ -63,6 +63,17 @@
   #  matrixDomain     = "accord.tube";
   #};
 
+  hectic.services.jitsi = {
+    enable   = true;
+    hostName = "meet.accord.tube";
+  };
+
+  hectic.services.xmpp = {
+    enable = true;
+    domain = "accord.tube";
+    admins = [ "yukkop@accord.tube" ];
+  };
+
   networking = {
     networkmanager.enable = true;
     useDHCP = lib.mkDefault true;
@@ -91,13 +102,13 @@
     age.sshKeyPaths           = [ "/etc/ssh/ssh_host_ed25519_key" ];
     defaultSopsFile           = ../../../sus/neuro.yaml;
 
-    secrets."init-postgresql"     = {};
-    secrets."matrix/secrets"      = {};
-    secrets."matrix/turn-secret"  = {
-      owner = "turnserver";
-      group = "turnserver";
-      mode = "0400";
-    };
+    #secrets."init-postgresql"     = {};
+    #secrets."matrix/secrets"      = {};
+    #secrets."matrix/turn-secret"  = {
+    #  owner = "turnserver";
+    #  group = "turnserver";
+    #  mode = "0400";
+    #};
   };
 
   boot.loader.systemd-boot.enable = true;