luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-06-08 10:09:04 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore: redeploy stalwart with hidden creds

Browse source
This commit is contained in:
Luj 2024-08-25 19:28:56 +02:00
parent 45d66e0a09
commit 3e2971341a
Signed by: luj
GPG key ID: 6FC74C847011FD83
3 changed files with 21 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
machines/akhaten/stalwart.nix
View file

@ -3,10 +3,9 @@
services.stalwart-mail = {
enable = true;
settings = {
global.tracing.level = "trace";
authentication.fallback-admin = {
user = "admin";
secret = "$6$R469iElYzZ7v7TlV$PtJpqLO0Szw.B/r8V.puCC26i5.nfQLJQotTWrNoBsTrFo6/J1pC43OIMKc.2Oli/Of0pjPcgbBNmhfFImuuu0";
secret = "%{file:/var/lib/stalwart-mail/admin-hash}%";
};
lookup.default.hostname = "mail.luj.fr";
server = {
@ -57,6 +56,13 @@
};
};
age.secrets.stalwart-admin-hash = {
file = ../../secrets/stalwart-admin.age;
path = "/var/lib/stalwart-mail/admin-hash";
owner = "stalwart-mail";
group = "stalwart-mail";
};
machine.meta.zones."luj.fr".subdomains."mail" = {
A = [ config.machine.meta.ips.public.ipv4 ];
AAAA = [ config.machine.meta.ips.public.ipv6 ];