1 { lib, pkgs, config, myconfig, ... }:
3 config.users.users.nullmailer.uid = config.ids.uids.nullmailer;
4 config.users.groups.nullmailer.gid = config.ids.gids.nullmailer;
6 config.services.nullmailer = {
9 me = myconfig.env.mail.host;
10 remotes = "${myconfig.env.mail.relay} smtp";
14 config.secrets.keys = [
16 dest = "opendkim/eldiron.private";
17 user = config.services.opendkim.user;
18 group = config.services.opendkim.group;
20 text = myconfig.env.mail.dkim.eldiron.private;
23 dest = "opendkim/eldiron.txt";
24 user = config.services.opendkim.user;
25 group = config.services.opendkim.group;
28 eldiron._domainkey IN TXT ${myconfig.env.mail.dkim.eldiron.public}'';
31 dest = "opendmarc/ignore.hosts";
32 user = config.services.opendmarc.user;
33 group = config.services.opendmarc.group;
35 text = myconfig.env.mail.dmarc.ignore_hosts;
38 config.users.users."${config.services.opendkim.user}".extraGroups = [ "keys" ];
39 config.services.opendkim = {
41 domains = builtins.concatStringsSep "," (lib.flatten (map
43 (e: "${e.domain}${lib.optionalString (e.domain != "") "."}${zone.name}")
44 (zone.withEmail or [])
46 myconfig.env.dns.masterZones
48 keyPath = "${config.secrets.location}/opendkim";
50 configFile = pkgs.writeText "opendkim.conf" ''
55 config.systemd.services.opendkim.preStart = lib.mkBefore ''
56 # Skip the prestart script as keys are handled in secrets
59 config.services.filesWatcher.opendkim = {
62 config.secrets.fullPaths."opendkim/eldiron.private"
66 config.users.users."${config.services.opendmarc.user}".extraGroups = [ "keys" ];
67 config.services.opendmarc = {
69 configFile = pkgs.writeText "opendmarc.conf" ''
72 FailureReportsBcc postmaster@localhost.immae.eu
73 FailureReportsOnNone true
74 FailureReportsSentBy postmaster@immae.eu
75 IgnoreAuthenticatedClients true
76 IgnoreHosts ${config.secrets.fullPaths."opendmarc/ignore.hosts"}
79 TrustedAuthservIDs HOSTNAME, immae.eu, nef2.ens.fr
83 config.services.filesWatcher.opendmarc = {
86 config.secrets.fullPaths."opendmarc/ignore.hosts"
90 config.services.openarc = {
94 configFile = pkgs.writeText "openarc.conf" ''
95 AuthservID mail.immae.eu
97 KeyFile ${config.secrets.fullPaths."opendkim/eldiron.private"}
104 config.systemd.services.openarc.postStart = lib.optionalString
105 (lib.strings.hasPrefix "local:" config.services.openarc.socket) ''
106 while [ ! -S ${lib.strings.removePrefix "local:" config.services.openarc.socket} ]; do
109 chmod g+w ${lib.strings.removePrefix "local:" config.services.openarc.socket}
111 config.services.filesWatcher.openarc = {
114 config.secrets.fullPaths."opendkim/eldiron.private"