modules/private/mail/default.nix

   1 { lib, pkgs, config, ... }:
   2 {
   3   imports = [
   4     ./milters.nix
   5     ./postfix.nix
   6     ./dovecot.nix
   7     ./relay.nix
   8     ./rspamd.nix
   9     ./opensmtpd.nix
  10   ];
  11   options.myServices.mail.enable = lib.mkEnableOption "enable Mail services";
  12   options.myServices.mailRelay.enable = lib.mkEnableOption "enable Mail relay services";
  13   options.myServices.mailBackup.enable = lib.mkEnableOption "enable MX backup services";
  14
  15   config = lib.mkIf config.myServices.mail.enable {
  16     security.acme.certs."mail" = config.myServices.certificates.certConfig // {
  17       domain = config.hostEnv.fqdn;
  18       extraDomains = let
  19         zonesWithMx = builtins.filter (zone:
  20           lib.attrsets.hasAttr "withEmail" zone && lib.lists.length zone.withEmail > 0
  21         ) config.myEnv.dns.masterZones;
  22         mxs = map (zone: "${config.hostEnv.mx.subdomain}.${zone.name}") zonesWithMx;
  23       in builtins.listToAttrs (map (mx: lib.attrsets.nameValuePair mx null) mxs);
  24     };
  25     services.duplyBackup.profiles = {
  26       mail = {
  27         rootDir = "/var/lib";
  28         excludeFile = lib.mkAfter ''
  29           + /var/lib/vhost
  30           - /var/lib
  31           '';
  32       };
  33     };
  34   };
  35 }