- outputs = { self, nix-lib, my-lib, files-watcher, openarc, secrets }:
- let
- cfg = name': { config, lib, pkgs, name, ... }: {
- imports = [
- (my-lib.lib.withNarKey files-watcher "nixosModule")
- (my-lib.lib.withNarKey openarc "nixosModule")
- (my-lib.lib.withNarKey secrets "nixosModule")
- ];
- config = lib.mkIf (name == name') {
- services.openarc = {
- enable = true;
- user = "opendkim";
- socket = "/run/openarc/openarc.sock";
- group = config.services.postfix.group;
- configFile = pkgs.writeText "openarc.conf" ''
- AuthservID mail.immae.eu
- Domain mail.immae.eu
- KeyFile ${config.secrets.fullPaths."opendkim/eldiron.private"}
- Mode sv
- Selector eldiron
- SoftwareHeader yes
- Syslog Yes
- '';
- };
- systemd.services.openarc.serviceConfig.Slice = "mail.slice";
- systemd.services.openarc.postStart = ''
- while [ ! -S ${config.services.openarc.socket} ]; do
- sleep 0.5
- done
- chmod g+w ${config.services.openarc.socket}
+ outputs = { self, files-watcher, openarc, secrets }: {
+ nixosModule = self.nixosModules.openarc;
+ nixosModules.openarc = { config, pkgs, ... }: {
+ imports = [
+ files-watcher.nixosModule
+ openarc.nixosModule
+ secrets.nixosModule
+ ];
+ config = {
+ services.openarc = {
+ enable = true;
+ user = "opendkim";
+ socket = "/run/openarc/openarc.sock";
+ group = config.services.postfix.group;
+ configFile = pkgs.writeText "openarc.conf" ''
+ AuthservID mail.immae.eu
+ Domain mail.immae.eu
+ KeyFile ${config.secrets.fullPaths."opendkim/eldiron.private"}
+ Mode sv
+ Selector eldiron
+ SoftwareHeader yes
+ Syslog Yes