aboutsummaryrefslogtreecommitdiff
path: root/flakes/openarc
diff options
context:
space:
mode:
authorIsmaël Bouya <ismael.bouya@normalesup.org>2021-01-02 02:32:37 +0100
committerIsmaël Bouya <ismael.bouya@normalesup.org>2021-01-02 02:32:37 +0100
commit238587099b92027ad780053f0f6217ad88b61ad2 (patch)
tree3d3fa506cef6845fdb09fc651a6aaac342ed2520 /flakes/openarc
parenta1a2455f53bde1235b221a842d3c888c51fcecac (diff)
downloadNix-238587099b92027ad780053f0f6217ad88b61ad2.tar.gz
Nix-238587099b92027ad780053f0f6217ad88b61ad2.tar.zst
Nix-238587099b92027ad780053f0f6217ad88b61ad2.zip
Move flake private file in common place
Diffstat (limited to 'flakes/openarc')
-rw-r--r--flakes/openarc/flake.nix2
-rw-r--r--flakes/openarc/private.nix35
2 files changed, 1 insertions, 36 deletions
diff --git a/flakes/openarc/flake.nix b/flakes/openarc/flake.nix
index e2b771a..d313f8e 100644
--- a/flakes/openarc/flake.nix
+++ b/flakes/openarc/flake.nix
@@ -75,7 +75,7 @@
75 }; 75 };
76 }; 76 };
77 }) // { 77 }) // {
78 nixosModules = (if builtins.pathExists ./private.nix then import ./private.nix nixpkgs else {}); 78 nixosModules = (if builtins.pathExists ../private/openarc.nix then import ../private/openarc.nix nixpkgs else {});
79 nixosModule = { config, lib, pkgs, ... }: 79 nixosModule = { config, lib, pkgs, ... }:
80 let 80 let
81 cfg = config.services.openarc; 81 cfg = config.services.openarc;
diff --git a/flakes/openarc/private.nix b/flakes/openarc/private.nix
deleted file mode 100644
index 5244ca9..0000000
--- a/flakes/openarc/private.nix
+++ /dev/null
@@ -1,35 +0,0 @@
1pkgs:
2let
3 cfg = name': { config, lib, pkgs, name, ... }: lib.mkIf (name == name') {
4 services.openarc = {
5 enable = true;
6 user = "opendkim";
7 socket = "local:${config.myServices.mail.milters.sockets.openarc}";
8 group = config.services.postfix.group;
9 configFile = pkgs.writeText "openarc.conf" ''
10 AuthservID mail.immae.eu
11 Domain mail.immae.eu
12 KeyFile ${config.secrets.fullPaths."opendkim/eldiron.private"}
13 Mode sv
14 Selector eldiron
15 SoftwareHeader yes
16 Syslog Yes
17 '';
18 };
19 systemd.services.openarc.serviceConfig.Slice = "mail.slice";
20 systemd.services.openarc.postStart = lib.optionalString
21 (lib.strings.hasPrefix "local:" config.services.openarc.socket) ''
22 while [ ! -S ${lib.strings.removePrefix "local:" config.services.openarc.socket} ]; do
23 sleep 0.5
24 done
25 chmod g+w ${lib.strings.removePrefix "local:" config.services.openarc.socket}
26 '';
27 services.filesWatcher.openarc = {
28 restart = true;
29 paths = [
30 config.secrets.fullPaths."opendkim/eldiron.private"
31 ];
32 };
33 };
34in
35 pkgs.lib.genAttrs ["eldiron" "backup-2"] cfg