Add jitsi-meet (work in progress)

hosts/nixedo/configuration.nix

@@ -21,6 +21,11 @@
   cli.podman.enable = true;
   desktop.dconf.enable = true;
 
+  # TODO: why didn't it work when adding this to jitsi.nix?
+  nixpkgs.config.permittedInsecurePackages = [
+    "jitsi-meet-1.0.8043"
+  ];
+
   services.logind.lidSwitchExternalPower = "ignore";
 
   boot.loader = {

hosts/nixedo/homelab.nix

@@ -14,6 +14,7 @@
       homepage-dashboard.enable = true;
       immich.enable = true;
       jellyfin.enable = true;
+      jitsi.enable = true;
       paperless.enable = true;
       peertube.enable = true;
       tubearchivist.enable = true;

hosts/nixedo/modules/default.nix

@@ -26,6 +26,7 @@ with lib;
     ./home-assistant.nix
     ./immich.nix
     ./jellyfin.nix
+    ./jitsi.nix
     ./nginx
     ./paperless.nix
     ./peertube.nix

hosts/nixedo/modules/jitsi.nix

@@ -0,0 +1,41 @@
+{ config, lib, ... }:
+
+let
+  cfg = config.homelab.services.${service};
+  homelab = config.homelab;
+  service = "jitsi";
+
+  inherit (lib) mkEnableOption mkOption types;
+in
+{
+  options.homelab.services.${service} = {
+    enable = mkEnableOption "Enable ${service}";
+
+    url = mkOption {
+      default = "meet.${homelab.domain}";
+      type = types.str;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services = {
+      jitsi-meet = {
+        enable = false;
+
+        hostName = cfg.url;
+
+        secureDomain.enable = true;
+      };
+
+      nginx.virtualHosts.${cfg.url} = {
+        enableACME = false;
+        forceSSL = false;
+      };
+
+      cloudflared.tunnels.${homelab.cloudflared.tunnelId}.ingress = {
+        # TODO: is this the correct port?
+        ${cfg.url} = "http://localhost:5280";
+      };
+    };
+  };
+}