Squash changes containing private information

There were a lot of changes since the previous commit, but a lot of them
contained personnal information about users. All thos changes got
stashed into a single commit (history is kept in a different place) and
private information was moved in a separate private repository

1 files changed, 44 insertions, 0 deletions

diff --git a/systems/eldiron/mail/default.nix b/systems/eldiron/mail/default.nix
new file mode 100644
index 0000000..4e13f6a
--- /dev/null
+++ b/systems/eldiron/mail/default.nix
@@ -0,0 +1,44 @@
+{ lib, pkgs, config, ... }:
+{
+  imports = [
+    ./postfix.nix
+    ./dovecot.nix
+    ./rspamd.nix
+    ./sympa.nix
+  ];
+
+  options.myServices.mail.enable = lib.mkEnableOption "enable Mail services";
+  config = lib.mkIf config.myServices.mail.enable {
+    myServices.mail.milters.enable = true;
+    security.acme.certs."mail" = {
+      postRun = lib.mkBefore ''
+        cp -f fullchain.pem /etc/dovecot/fullchain.pem
+        chown :dovecot2 /etc/dovecot/fullchain.pem
+        chmod a+r /etc/dovecot/fullchain.pem
+      '';
+      domain = config.hostEnv.fqdn;
+      extraDomainNames = let
+        zonesWithMx = builtins.attrNames (lib.filterAttrs (n: v: v.hasEmail) config.myServices.dns.zones);
+        mxs = map (n: "${config.hostEnv.mx.subdomain}.${n}") zonesWithMx;
+      in mxs;
+    };
+    # This is for clients that don’t support elliptic curves (e.g.
+    # printer)
+    security.acme.certs."mail-rsa" = {
+      postRun = lib.mkBefore ''
+        cp -f fullchain.pem /etc/dovecot/fullchain-rsa.pem
+        chown :dovecot2 /etc/dovecot/fullchain-rsa.pem
+        chmod a+r /etc/dovecot/fullchain-rsa.pem
+      '';
+      domain = config.hostEnv.fqdn;
+      keyType = "rsa4096";
+      extraDomainNames = let
+        zonesWithMx = builtins.attrNames (lib.filterAttrs (n: v: v.hasEmail) config.myServices.dns.zones);
+        mxs = map (n: "${config.hostEnv.mx.subdomain}.${n}") zonesWithMx;
+      in mxs;
+    };
+    systemd.slices.mail = {
+      description = "Mail slice";
+    };
+  };
+}