nixos/services/mailserver.nix

44 lines
1.3 KiB
Nix
Raw Normal View History

{ config, lib, ... }:
2019-02-26 13:44:40 +01:00
with lib;
2019-02-26 13:44:40 +01:00
mkIf (elem "mailserver" config.machine.services) {
mailserver = let
domain = config.machine.domain;
mkFqdnAlias = name: [ "${name}@${domain}" "${name}@mail.${domain}" ];
mkUser = user: rec {
name = "${user.name}@${domain}";
value = {
hashedPassword = (fileContents "${config.machine.secretPath}/${user.name}.mail");
aliases = [ "${user.name}@mail.${domain}" ] ++ (flatten (map mkFqdnAlias user.aliases));
};
};
in rec {
2019-02-26 13:44:40 +01:00
enable = true;
fqdn = "mail.${domain}";
domains = [ domain ];
loginAccounts = listToAttrs (map mkUser config.machine.mailAccounts);
2019-02-26 13:44:40 +01:00
# Use Let's Encrypt certificates. Note that this needs to set up a stripped
# down nginx and opens port 80.
certificateScheme = 1;
certificateFile = "/var/lib/acme/" + fqdn + "/fullchain.pem";
keyFile = "/var/lib/acme/" + fqdn + "/key.pem";
#dhParamBitLength = 4096; # this doesn't exist???
# Enable IMAP and POP3
enableImap = true;
enablePop3 = false;
2019-02-26 13:44:40 +01:00
enableImapSsl = true;
enablePop3Ssl = false;
2019-02-26 13:44:40 +01:00
# Enable the ManageSieve protocol
enableManageSieve = true;
# whether to scan inbound emails for viruses (note that this requires at least
# 1 Gb RAM for the server. Without virus scanning 256 MB RAM should be plenty)
virusScanning = false;
};
}