mirror of
https://github.com/JulienMalka/snowfield.git
synced 2025-03-31 17:20:53 +02:00
50 lines
1.3 KiB
Nix
50 lines
1.3 KiB
Nix
{ pkgs, config, lib, inputs, ... }:
|
|
let
|
|
cfg = config.luj.mailserver;
|
|
in
|
|
with lib;
|
|
{
|
|
options.luj.mailserver = {
|
|
enable = mkEnableOption "Enable mailserver";
|
|
};
|
|
|
|
config = mkIf cfg.enable
|
|
{
|
|
mailserver = {
|
|
enable = true;
|
|
fqdn = "mail.julienmalka.me";
|
|
domains = [ "malka.sh" "ens.school" ];
|
|
|
|
enableManageSieve = true;
|
|
|
|
# A list of all login accounts. To create the password hashes, use
|
|
# nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "super secret password" | cut -d: -f2
|
|
loginAccounts = {
|
|
"julien@malka.sh" = {
|
|
hashedPasswordFile = "/run/secrets/malkash-pw";
|
|
catchAll = [ "malka.sh" ];
|
|
};
|
|
"julien.malka@ens.school" = {
|
|
hashedPasswordFile = "/run/secrets/ensmailmalka-pw";
|
|
};
|
|
"camille.mondon@ens.school" = {
|
|
hashedPasswordFile = "/run/secrets/ensmailmondon-pw";
|
|
};
|
|
|
|
};
|
|
certificateScheme = 3;
|
|
};
|
|
|
|
services.roundcube = {
|
|
enable = true;
|
|
plugins = [ "managesieve" ];
|
|
hostName = "webmail.julienmalka.me";
|
|
};
|
|
|
|
sops.secrets.malkash-pw = { };
|
|
sops.secrets.ensmailmalka-pw = { };
|
|
sops.secrets.ensmailmondon-pw = { };
|
|
|
|
nix.gcRoots = [ inputs.simple-nixos-mailserver ];
|
|
};
|
|
}
|