modules/private/websites/tools/mail/default.nix

   1 { lib, pkgs, config,  ... }:
   2 let
   3   roundcubemail = pkgs.callPackage ./roundcubemail.nix {
   4     inherit (pkgs.webapps) roundcubemail roundcubemail-plugins roundcubemail-skins;
   5     env = config.myEnv.tools.roundcubemail;
   6   };
   7   rainloop = pkgs.callPackage ./rainloop.nix {};
   8   cfg = config.myServices.websites.tools.email;
   9 in
  10 {
  11   options.myServices.websites.tools.email = {
  12     enable = lib.mkEnableOption "enable email website";
  13   };
  14
  15   imports = [
  16     ./mta-sts.nix
  17   ];
  18
  19   config = lib.mkIf cfg.enable {
  20     services.duplyBackup.profiles.mail.excludeFile = ''
  21       + ${rainloop.varDir}
  22       + ${roundcubemail.varDir}
  23       '';
  24     secrets.keys = roundcubemail.keys;
  25
  26     services.websites.env.tools.modules =
  27       [ "proxy_fcgi" ]
  28       ++ rainloop.apache.modules
  29       ++ roundcubemail.apache.modules;
  30
  31     services.websites.env.tools.vhostConfs.mail = {
  32       certName   = "mail";
  33       addToCerts = true;
  34       hosts      = ["mail.immae.eu"];
  35       root       = "/run/current-system/webapps/_mail";
  36       extraConfig = [
  37         rainloop.apache.vhostConf
  38         roundcubemail.apache.vhostConf
  39         ''
  40           <Directory /run/current-system/webapps/_mail>
  41             Require all granted
  42             Options -Indexes
  43           </Directory>
  44         ''
  45       ];
  46     };
  47     systemd.services = {
  48       phpfpm-rainloop = {
  49         after = lib.mkAfter rainloop.phpFpm.serviceDeps;
  50         wants = rainloop.phpFpm.serviceDeps;
  51       };
  52       phpfpm-roundcubemail = {
  53         after = lib.mkAfter roundcubemail.phpFpm.serviceDeps;
  54         wants = roundcubemail.phpFpm.serviceDeps;
  55       };
  56     };
  57
  58     services.phpfpm.pools.roundcubemail = {
  59       listen = roundcubemail.phpFpm.socket;
  60       extraConfig = roundcubemail.phpFpm.pool;
  61       phpOptions = config.services.phpfpm.phpOptions + roundcubemail.phpFpm.phpConfig;
  62     };
  63     services.phpfpm.pools.rainloop = {
  64       listen = rainloop.phpFpm.socket;
  65       extraConfig = rainloop.phpFpm.pool;
  66     };
  67     system.activationScripts = {
  68       roundcubemail = roundcubemail.activationScript;
  69       rainloop = rainloop.activationScript;
  70     };
  71
  72     myServices.websites.webappDirs = {
  73       _mail = ./www;
  74       "${roundcubemail.apache.webappName}" = roundcubemail.webRoot;
  75       "${rainloop.apache.webappName}" = rainloop.webRoot;
  76     };
  77
  78   };
  79
  80 }