v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions Packages Projects Releases Activity

more mailserver config

Browse source
This commit is contained in:
Vivian 2022-09-22 10:01:42 +02:00
parent 0eba0ac5f7
commit c4f832065d
1 changed files with 35 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

48
nixos/hosts/olympus/mailserver/configuration.nix
View file

@ -25,7 +25,7 @@ let vs = config.vault-secrets.secrets; in
''; '';
vault-secrets.secrets.mailserver = { vault-secrets.secrets.mailserver = {
services = [ "dovecot2" "postfix"]; services = [ "dovecot2" "postfix" ];
}; };
mailserver = { mailserver = {
@ -40,23 +40,45 @@ let vs = config.vault-secrets.secrets; in
}; };
certificateScheme = 3; certificateScheme = 3;
indexDir = "/var/lib/dovecot/indices";
fullTextSearch = {
enable = true;
# index new email as they arrive
autoIndex = true;
# this only applies to plain text attachments, binary attachments are never indexed
indexAttachments = true;
enforced = "body";
memoryLimit = 2000;
autoIndexExclude = [ "\\Junk" ];
};
}; };
services.roundcube = { services.roundcube = {
enable = true; enable = true;
# this is the url of the vhost, not necessarily the same as the fqdn of package = pkgs.roundcube.withPlugins (plugins: [ plugins.persistent_login ]);
# the mailserver plugins = [
hostName = "webmail.0x76.dev"; "archive"
extraConfig = '' "enigma"
# starttls needed for authentication, so the fqdn required to match "markasjunk"
# the certificate "persistent_login"
$config['smtp_host'] = "tls://${config.mailserver.fqdn}"; ];
$config['smtp_user'] = "%u"; # this is the url of the vhost, not necessarily the same as the fqdn of
$config['smtp_pass'] = "%p"; # the mailserver
''; hostName = "webmail.0x76.dev";
extraConfig = ''
# starttls needed for authentication, so the fqdn required to match
# the certificate
$config['smtp_host'] = "tls://${config.mailserver.fqdn}";
$config['smtp_user'] = "%u";
$config['smtp_pass'] = "%p";
'';
}; };
services.nginx.enable = true; services.nginx = {
enable = true;
};
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
security.acme.defaults.email = "victor@xirion.net"; security.acme.defaults.email = "victor@xirion.net";