From c4511c38a49c60394b91ec9d4499cdbf41f4e60c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Fri, 13 Oct 2023 00:43:56 +0200
Subject: Change dkim key for a 2048b one

---
 flakes/private/milters/flake.nix | 9 ++++++++-
 flakes/private/openarc/flake.nix | 5 +++--
 2 files changed, 11 insertions(+), 3 deletions(-)

(limited to 'flakes/private')

diff --git a/flakes/private/milters/flake.nix b/flakes/private/milters/flake.nix
index c4de5b6..fc088f9 100644
--- a/flakes/private/milters/flake.nix
+++ b/flakes/private/milters/flake.nix
@@ -42,6 +42,12 @@
               permissions = "0400";
               text = config.myEnv.mail.dkim.eldiron.private;
             };
+            "opendkim/eldiron2.private" = {
+              user = config.services.opendkim.user;
+              group = config.services.opendkim.group;
+              permissions = "0400";
+              text = config.myEnv.mail.dkim.eldiron2.private;
+            };
           };
           users.users."${config.services.opendkim.user}".extraGroups = [ "keys" ];
           services.opendkim = {
@@ -55,7 +61,7 @@
               in
                 builtins.concatStringsSep "," domains';
             keyPath = config.secrets.fullPaths."opendkim";
-            selector = "eldiron";
+            selector = "eldiron2";
             configFile = pkgs.writeText "opendkim.conf" ''
               SubDomains        yes
               UMask             002
@@ -72,6 +78,7 @@
             restart = true;
             paths = [
               config.secrets.fullPaths."opendkim/eldiron.private"
+              config.secrets.fullPaths."opendkim/eldiron2.private"
             ];
           };
 
diff --git a/flakes/private/openarc/flake.nix b/flakes/private/openarc/flake.nix
index 56c3a1a..69e0767 100644
--- a/flakes/private/openarc/flake.nix
+++ b/flakes/private/openarc/flake.nix
@@ -21,9 +21,9 @@
           configFile = pkgs.writeText "openarc.conf" ''
             AuthservID              mail.immae.eu
             Domain                  mail.immae.eu
-            KeyFile                 ${config.secrets.fullPaths."opendkim/eldiron.private"}
+            KeyFile                 ${config.secrets.fullPaths."opendkim/eldiron2.private"}
             Mode                    sv
-            Selector                eldiron
+            Selector                eldiron2
             SoftwareHeader          yes
             Syslog                  Yes
             '';
@@ -38,6 +38,7 @@
         services.filesWatcher.openarc = {
           restart = true;
           paths = [
+            config.secrets.fullPaths."opendkim/eldiron2.private"
             config.secrets.fullPaths."opendkim/eldiron.private"
           ];
         };
-- 
cgit v1.2.3