chore: rename lisanew

lib/luj.nix

@@ -57,11 +57,11 @@ let
               vpn = "fd7a:115c:a1e0::c";
             };
           };
-          lisanew = {
+          akhaten = {
             inherit tld;
             arch = "x86_64-linux";
-            nixpkgs_version = inputs.nixpkgs;
-            hm_version = inputs.home-manager;
+            nixpkgs_version = inputs.unstable;
+            hm_version = inputs.home-manager-unstable;
             ipv4 = {
               public = "163.172.91.82";
               vpn = "100.100.45.32";

machines/akhaten/default.nix

@@ -3,6 +3,7 @@
   imports = [
     ./hardware.nix
     ./home-julien.nix
+    ./stalwart.nix
   ];
 
   deployment.tags = [ "server" ];
@@ -27,5 +28,5 @@
     };
   };
 
-  system.stateVersion = "24.05";
+  system.stateVersion = "24.11";
 }

machines/akhaten/stalwart.nix

@@ -0,0 +1,71 @@
+{
+  services.stalwart-mail = {
+    enable = true;
+    settings = {
+      global.tracing.level = "trace";
+      authentication.fallback-admin = {
+        user = "admin";
+        secret = "$6$R469iElYzZ7v7TlV$PtJpqLO0Szw.B/r8V.puCC26i5.nfQLJQotTWrNoBsTrFo6/J1pC43OIMKc.2Oli/Of0pjPcgbBNmhfFImuuu0";
+      };
+      lookup.default.hostname = "mail.luj.fr";
+      server = {
+        max-connections = 8192;
+        hostname = "mail.luj.fr";
+        tls.enable = true;
+        listener = {
+          "smtp" = {
+            bind = [ "[::]:25" ];
+            protocol = "smtp";
+          };
+          "smtp-submission" = {
+            bind = "[::]:587";
+            protocol = "smtp";
+          };
+          "smtp-submissions" = {
+            bind = [ "[::]:465" ];
+            protocol = "smtp";
+            tls.implicit = true;
+          };
+          "imap" = {
+            bind = [ "[::]:143" ];
+            protocol = "imap";
+          };
+          "imaptls" = {
+            bind = [ "[::]:993" ];
+            protocol = "imap";
+            tls.implicit = true;
+          };
+          "http" = {
+            bind = "[::]:80";
+            protocol = "http";
+          };
+
+          "https" = {
+            bind = "[::]:443";
+            protocol = "http";
+            tls.implicit = true;
+          };
+
+          "sieve" = {
+            bind = "[::]:4190";
+            protocol = "managesieve";
+          };
+        };
+      };
+
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+    8080
+    465
+    993
+    143
+    25
+    4190
+    587
+  ];
+
+}