Added mailserver and hedgedoc service

modules/docs/default.nix

@@ -0,0 +1,55 @@
+{ lib, pkgs, config, ... }:
+with lib;
+let
+  cfg = config.luj.docs;
+  port = 3013;
+in
+{
+
+  options.luj.docs = {
+
+    enable = mkEnableOption "activate hedgedoc service";
+    nginx.enable = mkEnableOption "activate nginx";
+    nginx.subdomain = mkOption {
+      type = types.str;
+    };
+
+  };
+
+  config = mkIf cfg.enable (
+    mkMerge [{
+      services.hedgedoc = {
+        enable = true;
+        configuration = {
+          port = port;
+          db = {
+            dialect = "postgres";
+            host = "/run/postgresql";
+          };
+          domain = "docs.julienmalka.me";
+          protocolUseSSL = true;
+          allowFreeURL = true;
+          allowEmailRegister = false;
+          allowAnonymous = false;
+          allowAnonymousEdits = true;
+          allowGravatar = true;
+        };
+      };
+      services.postgresql = {
+        ensureDatabases = [ "hedgedoc" ];
+        ensureUsers = [
+          {
+            name = "hedgedoc";
+            ensurePermissions."DATABASE hedgedoc" = "ALL PRIVILEGES";
+          }
+        ];
+      };
+    }
+
+      (mkIf cfg.nginx.enable (mkSubdomain cfg.nginx.subdomain port))]);
+
+
+
+
+
+}

modules/mailserver/default.nix

@@ -0,0 +1,39 @@
+{ pkgs, config, lib, inputs, ... }:
+let
+  cfg = config.luj.mailserver;
+in
+with lib;
+{
+  options.luj.mailserver = {
+    enable = mkEnableOption "Enable mailserver";
+  };
+
+  config = mkIf cfg.enable
+    {
+      mailserver = {
+        enable = true;
+        fqdn = "mail.julienmalka.me";
+        domains = [ "malka.sh" "ens.school" ];
+
+        # A list of all login accounts. To create the password hashes, use
+        # nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "super secret password" | cut -d: -f2
+        loginAccounts = {
+          "julien@malka.sh" = {
+            hashedPasswordFile = "/run/secrets/malkash-pw";
+            aliases = [ "postmaster@malka.sh" ];
+          };
+          "julien.malka@ens.school" = {
+            hashedPasswordFile = "/run/secrets/ensmailmalka-pw";
+          };
+          "camille.mondon@ens.school" = {
+            hashedPassword = "/run/secrets/ensmailmondon-pw";
+          };
+        };
+        certificateScheme = 3;
+      };
+
+      sops.secrets.malkash-pw = { };
+      sops.secrets.ensmailmalka-pw = { };
+      sops.secrets.ensmailmondon-pw = { };
+    };
+}