derped/nixos
1
0
Fork 0
Code Releases Activity

Reload dovecot2 on certificate update.

Browse source
This commit is contained in:
Kevin Baensch 2024-12-07 21:43:57 +01:00
parent 743830f7c6
commit 925cabde64
Signed by: derped
GPG key ID: C0F1D326C7626543
1 changed files with 28 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
services/mailserver.nix
View file

@ -11,8 +11,7 @@ with lib;
mailserver.nixosModules.mailserver mailserver.nixosModules.mailserver
]; ];
} }
// mkIf (elem "mailserver" config.machine.services) { // mkIf (elem "mailserver" config.machine.services) (
mailserver =
let let
cfg = config.machine; cfg = config.machine;
inherit (cfg) domain; inherit (cfg) domain;
@ -22,7 +21,7 @@ with lib;
"${name}@${fdomain}" "${name}@${fdomain}"
]; ];
mkExDomAlias = name: (map (exDom: "${name}@${exDom}") cfg.extraDomains); mkExDomAlias = name: (map (exDom: "${name}@${exDom}") cfg.extraDomains);
mkUser = user: rec { mkUser = user: {
name = "${user.name}@${domain}"; name = "${user.name}@${domain}";
value = { value = {
hashedPasswordFile = config.sops.secrets."users/${user.name}/mail".path; hashedPasswordFile = config.sops.secrets."users/${user.name}/mail".path;
@ -33,7 +32,8 @@ with lib;
}; };
}; };
in in
rec { {
mailserver = {
enable = true; enable = true;
fqdn = fdomain; fqdn = fdomain;
domains = [ domains = [
@ -63,5 +63,9 @@ with lib;
# 1 Gb RAM for the server. Without virus scanning 256 MB RAM should be plenty) # 1 Gb RAM for the server. Without virus scanning 256 MB RAM should be plenty)
virusScanning = false; virusScanning = false;
}; };
systemd.services."acme-${fdomain}".serviceConfig.ExecStartPost = [
"+systemctl reload dovecot2"
];
sops.secrets = fn.sopsHelper (user: "users/${user.name}/mail") config.machine.mailAccounts { }; sops.secrets = fn.sopsHelper (user: "users/${user.name}/mail") config.machine.mailAccounts { };
} }
)