35 lines
1.0 KiB
Nix
35 lines
1.0 KiB
Nix
{ config, ... }:
|
|
let
|
|
inherit (config.serverConfig) ports vhosts;
|
|
inherit (config.networking) domain;
|
|
in
|
|
{
|
|
# services.dovecot2.sieve.extensions = [ "fileinto" ]; # sives break without this for some reason
|
|
mailserver = {
|
|
enable = true;
|
|
fqdn = vhosts.mail_host.host;
|
|
domains = [ domain ];
|
|
|
|
# A list of all login accounts. To create the password hashes, use
|
|
# nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
|
|
loginAccounts = {
|
|
"contact@${domain}" = {
|
|
hashedPasswordFile = ./mailpass/contact;
|
|
aliases = [ "kontakt@${domain}" ];
|
|
};
|
|
"admin@${domain}" = {
|
|
hashedPasswordFile = ./mailpass/admin;
|
|
};
|
|
"grimmauld@${domain}" = {
|
|
hashedPasswordFile = ./mailpass/grimmauld;
|
|
};
|
|
};
|
|
|
|
# Use Let's Encrypt certificates. Note that this needs to set up a stripped
|
|
# down nginx and opens port 80.
|
|
certificateScheme = "manual";
|
|
certificateFile = "/var/lib/acme/${domain}/fullchain.pem";
|
|
keyFile = "/var/lib/acme/${domain}/key.pem";
|
|
};
|
|
}
|