derped/nixos
1
0
Fork 0
Code Releases Activity

Generate mail accounts from a user list.

Browse source
This commit is contained in:
Kevin Baensch 2019-08-27 16:01:04 +02:00
parent 9f49f3fcf0
commit 51e986da9c
3 changed files with 17 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
machines/Ophanim/options.nix
View file

@ -11,6 +11,7 @@ with lib;
config.machine = rec { config.machine = rec {
hostName = "Ophanim"; hostName = "Ophanim";
administrators = [ { name = "derped"; id = 1337; } ]; administrators = [ { name = "derped"; id = 1337; } ];
mailAccounts = [ "derped" "mailman3" ];
domain = "ophanim.de"; domain = "ophanim.de";
allowUnfree = true; allowUnfree = true;
conffiles = [ conffiles = [

6
options/machine.nix
View file

@ -47,6 +47,12 @@ with lib;
The Machines domain name. The Machines domain name.
''; '';
}; };
mailAccounts = mkOption {
type = types.listOf types.string;
description = ''
List of mail account user names.
'';
};
vHosts = mkOption { vHosts = mkOption {
type = types.listOf types.attrs; type = types.listOf types.attrs;
description = '' description = ''

19
services/mailserver.nix
View file

@ -3,18 +3,19 @@
with lib; with lib;
mkIf (elem "mailserver" config.machine.services) { mkIf (elem "mailserver" config.machine.services) {
mailserver = rec { mailserver = let
mkUser = username: {
name = "${username}@${config.machine.domain}";
value = {
hashedPassword = (fileContents "/secret/${username}.mail");
};
};
in rec {
enable = true; enable = true;
fqdn = "mail.${config.machine.domain}"; fqdn = "mail.${config.machine.domain}";
domains = [ config.machine.domain ]; domains = [ config.machine.domain ];
loginAccounts = { loginAccounts = listToAttrs (map mkUser config.machine.mailAccounts);
"derped@${config.machine.domain}" = {
hashedPassword = (fileContents /secret/derped.mail);
};
"mailman3@${config.machine.domain}" = {
hashedPassword = (fileContents /secret/mailman3.mail);
};
};
# Use Let's Encrypt certificates. Note that this needs to set up a stripped # Use Let's Encrypt certificates. Note that this needs to set up a stripped
# down nginx and opens port 80. # down nginx and opens port 80.
certificateScheme = 1; certificateScheme = 1;