aboutsummaryrefslogtreecommitdiff
path: root/modules/private/mail/sympa.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/private/mail/sympa.nix')
-rw-r--r--modules/private/mail/sympa.nix11
1 files changed, 11 insertions, 0 deletions
diff --git a/modules/private/mail/sympa.nix b/modules/private/mail/sympa.nix
index f7070e6..5270b69 100644
--- a/modules/private/mail/sympa.nix
+++ b/modules/private/mail/sympa.nix
@@ -50,12 +50,22 @@ in
50 dest = "sympa/scenari/${n}"; permissions = "0400"; group = "sympa"; user = "sympa"; text = v; 50 dest = "sympa/scenari/${n}"; permissions = "0400"; group = "sympa"; user = "sympa"; text = v;
51 }) sympaConfig.scenari; 51 }) sympaConfig.scenari;
52 users.users.sympa.extraGroups = [ "keys" ]; 52 users.users.sympa.extraGroups = [ "keys" ];
53 systemd.slices.mail-sympa = {
54 description = "Sympa slice";
55 };
56
53 systemd.services.sympa.serviceConfig.SupplementaryGroups = [ "keys" ]; 57 systemd.services.sympa.serviceConfig.SupplementaryGroups = [ "keys" ];
54 systemd.services.sympa-archive.serviceConfig.SupplementaryGroups = [ "keys" ]; 58 systemd.services.sympa-archive.serviceConfig.SupplementaryGroups = [ "keys" ];
55 systemd.services.sympa-bounce.serviceConfig.SupplementaryGroups = [ "keys" ]; 59 systemd.services.sympa-bounce.serviceConfig.SupplementaryGroups = [ "keys" ];
56 systemd.services.sympa-bulk.serviceConfig.SupplementaryGroups = [ "keys" ]; 60 systemd.services.sympa-bulk.serviceConfig.SupplementaryGroups = [ "keys" ];
57 systemd.services.sympa-task.serviceConfig.SupplementaryGroups = [ "keys" ]; 61 systemd.services.sympa-task.serviceConfig.SupplementaryGroups = [ "keys" ];
58 62
63 systemd.services.sympa.serviceConfig.Slice = "mail-sympa.slice";
64 systemd.services.sympa-archive.serviceConfig.Slice = "mail-sympa.slice";
65 systemd.services.sympa-bounce.serviceConfig.Slice = "mail-sympa.slice";
66 systemd.services.sympa-bulk.serviceConfig.Slice = "mail-sympa.slice";
67 systemd.services.sympa-task.serviceConfig.Slice = "mail-sympa.slice";
68
59 # https://github.com/NixOS/nixpkgs/pull/84202 69 # https://github.com/NixOS/nixpkgs/pull/84202
60 systemd.services.sympa.serviceConfig.ProtectKernelModules = lib.mkForce false; 70 systemd.services.sympa.serviceConfig.ProtectKernelModules = lib.mkForce false;
61 systemd.services.sympa-archive.serviceConfig.ProtectKernelModules = lib.mkForce false; 71 systemd.services.sympa-archive.serviceConfig.ProtectKernelModules = lib.mkForce false;
@@ -72,6 +82,7 @@ in
72 wantedBy = [ "multi-user.target" ]; 82 wantedBy = [ "multi-user.target" ];
73 after = [ "sympa.service" ]; 83 after = [ "sympa.service" ];
74 serviceConfig = { 84 serviceConfig = {
85 Slice = "mail-sympa.slice";
75 Type = "forking"; 86 Type = "forking";
76 PIDFile = "/run/sympa/wwsympa.pid"; 87 PIDFile = "/run/sympa/wwsympa.pid";
77 Restart = "always"; 88 Restart = "always";