summaryrefslogtreecommitdiff
path: root/modules
diff options
context:
space:
mode:
Diffstat (limited to 'modules')
-rw-r--r--modules/nixos/mailserver.nix16
1 files changed, 15 insertions, 1 deletions
diff --git a/modules/nixos/mailserver.nix b/modules/nixos/mailserver.nix
index 9ee8b10..767b13f 100644
--- a/modules/nixos/mailserver.nix
+++ b/modules/nixos/mailserver.nix
@@ -2,10 +2,14 @@
mailserver = {
enable = true;
stateVersion = 3;
+
+ # domain bs
fqdn = "mail.${config.networking.domain}";
domains = ["${config.networking.domain}"];
x509.useACMEHost = config.mailserver.fqdn;
+
loginAccounts = {
+ # test acc
"test@${config.networking.domain}" = {
hashedPasswordFile = builtins.toString config.age.secrets.mailserver-acc-test-pw.path;
};
@@ -15,6 +19,13 @@
};
};
};
+
+ # put dkim key into /etc for declarability
+ mailserver.dkimKeyDirectory = "/etc/dkim";
+ environment.etc."dkim/${config.networking.domain}.${config.mailserver.dkimSelector}.key".source =
+ config.age.secrets."dkim-${config.networking.domain}.${config.mailserver.dkimSelector}.key".path;
+
+ # does acme for me
services.nginx = {
enable = true;
virtualHosts = {
@@ -28,9 +39,12 @@
acceptTerms = true;
defaults.email = "mtgmonket@gmail.com";
};
+
+ # persist directories per the backup guidelines
environment.persistence."/persist" = {
directories = [
- "/var/dkim"
+ # not needed bc the dkim dir is declared
+ # "/var/dkim"
"/var/vmail"
"/var/lib/redis-rspamd"
"/var/lib/acme"