X-Git-Url: https://git.immae.eu/?p=perso%2FImmae%2FConfig%2FNix.git;a=blobdiff_plain;f=modules%2Fprivate%2Fmail%2Fmilters.nix;fp=modules%2Fprivate%2Fmail%2Fmilters.nix;h=4b93a7aea78847d9a575dd2ad912fef061b2fa0c;hp=172e216069e5142db5f46d0f746847cd731d35d0;hb=4c4652aabf2cb3ac8b40f2856eca07a1df9c27e0;hpb=da30ae4ffdd153a1eb32fb86f9ca9a65aa19e4e2 diff --git a/modules/private/mail/milters.nix b/modules/private/mail/milters.nix index 172e216..4b93a7a 100644 --- a/modules/private/mail/milters.nix +++ b/modules/private/mail/milters.nix @@ -17,30 +17,27 @@ ''; }; config = lib.mkIf (config.myServices.mail.enable || config.myServices.mailBackup.enable) { - secrets.keys = [ - { - dest = "opendkim"; + secrets.keys = { + "opendkim" = { isDir = true; user = config.services.opendkim.user; group = config.services.opendkim.group; permissions = "0550"; - } - { - dest = "opendkim/eldiron.private"; + }; + "opendkim/eldiron.private" = { user = config.services.opendkim.user; group = config.services.opendkim.group; permissions = "0400"; text = config.myEnv.mail.dkim.eldiron.private; - } - { - dest = "opendkim/eldiron.txt"; + }; + "opendkim/eldiron.txt" = { user = config.services.opendkim.user; group = config.services.opendkim.group; permissions = "0444"; text = '' eldiron._domainkey IN TXT ${config.myEnv.mail.dkim.eldiron.public}''; - } - ]; + }; + }; users.users."${config.services.opendkim.user}".extraGroups = [ "keys" ]; services.opendkim = { enable = true;