darkkirb/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions

add postfixadmin

Browse source
This commit is contained in:
Charlotte 🦝 Delenk 2022-01-20 09:57:32 +01:00
parent 366ac735b9
commit 869b3c9c0b
Signed by: darkkirb
GPG key ID: 015E3768A70AFBC5
2 changed files with 41 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
config/services/postfixadmin.nix Normal file
View file

@ -0,0 +1,36 @@
{ ... }: {
services.postfixadmin = {
enable = true;
adminEmail = "lotte@chir.rs";
database = {
dbname = "postfix";
host = "localhost";
passwordFile = "/run/secrets/services/postfixadmin/dbpassword";
username = "postfixadmin";
};
hostName = "mail.chir.rs";
setupPasswordFile = "/run/secrets/services/postfixadmin/setupPassword";
};
sops.secrets."services/postfixadmin/dbpassword" = {
owner = "nginx";
};
sops.secrets."services/postfixadmin/setupPassword" = {
owner = "nginx";
};
services.postgresql.ensureDatabases = [ "postfix" ];
services.postgresql.ensureUsers = [
{
name = "postfixadmin";
ensurePermissions = {
"DATABASE \"postfix\"" = "ALL PRIVILEGES";
};
}
];
services.nginx.virtualHosts."mail.chir.rs" = {
forceSSL = true;
http2 = true;
listenAddresses = [ "0.0.0.0" "[::]" ];
sslCertificate = "/var/lib/acme/chir.rs/cert.pem";
sslCertificateKey = "/var/lib/acme/chir.rs/key.pem";
};
}

7
secrets/nixos-8gb-fsn1-1/secrets.yaml
View file

@ -13,6 +13,9 @@ services:
gitea.nix: ENC[AES256_GCM,data:8Re9/GdZ7d/PV11nT0CLzqFj3SaJ6bu12VV14AAY+G446liX1w6nCB5L33w7SXLxnbIQV/x6LTAn+YZ5hNxLdHHxaPYF60L+HvmSNee6Jz6bGjMphGaAB1e+smNTqV5AU+FUqnL9wpr6y3wE+gm00I52HJQ44Mx2CVXPvB2NYpbJo7CrHQ9NdW67C+Ub5eoxwcl6FxLKst9dZ6+FwAmzkhrAuog9u7TnboX7Bx6sEn8Kl6XM/0mIG6L6,iv:sk2fZ+uOrSzXtuDO+n3ozNesEg1S8DC2bRqnqudufz0=,tag:H3cKnTLDqb4rHoYfCV+6eg==,type:str]
minio_scrape: ENC[AES256_GCM,data:w+VescGVui8/70HsSP/WCQG/E9fU0X45BXF2qwPNE2vnYM9XyCreHezX218Vb5qDOU3vRl71CJGVH4nv28nBgWvtu017ITfh56CX9dZt7tFAUx198WqXxW1Xc+D9NggWHXUFyAD80+dkzoPH2mUrdhBYeXwlhwyp9+DLF0Up00kdLsjDtSHpDiKKoIvzk3m0K00GZkMtOOENpomAoqtUduUupYRmL1GaHBMJ+XcuLuyvfSI3uSK9BzFxIfNPcJdrP2F28g==,iv:xe7BrC5mLz48efufLup5v0x/aI0kaqXNQ07l4G6kUdg=,tag:yepSZfc3034JaYo2pp15CA==,type:str]
old-homepage: ENC[AES256_GCM,data:DgOLD0YCRXsRSvrjQ/pK4RpYdzcO/j2Ifg4eYXFivrEVVj5ooPKeeeJAMX+L+XOjjNmHo5r8o0AvBnvJ4TeGto3VOQynkxw5apvkedR5ecC654Sz5+bRGr2bgtVzujiLH7+IiB3ljH9KYflYASvfmumowmR8R6074GNGKZlH2F7UYDKDdbd48p4pOFWP3Lv5/1iDvJ7Ve3hVASZqiUlS4elMa+8T0HYKkJyxWb76AT+t0M54ps6xgqDYbjrmbO2+UK95Z8DanOk06tk1t30=,iv:2/KdwQ86SO/LFeHTGNDVY+d4ZQnujK7OGuBuGEwkCbU=,tag:7yOVg0V29aGMTT8O5422kw==,type:str]
postfixadmin:
dbpassword: ENC[AES256_GCM,data:37kEiKKgJVRIzzWXY3o/Wpk5UQ==,iv:LAJXgMr/rTMkds1r1kEWzhwNb6aPzsAhqUEeoLyBDbo=,tag:TI7oYxdpNzw2dXA4hLmVnQ==,type:str]
setupPassword: ENC[AES256_GCM,data:2BiQLOZZ6zCh4F+DkeNpMGLeXoxmMtDkuAU4XGBNvso+f4jupowalLkhTG/kA8yUL6BWOxwtJGMEp5wO,iv:0guj3/elSzoOe/00wgi5Z4R4lVfWeWt8mUDao3RXK6I=,tag:1lFUqfeSGV04mfxaVrmSMg==,type:str]
email:
darkkirb@darkkirb.de: ENC[AES256_GCM,data:DgVyvDHsviJuGqM+YP4jjytnzJE=,iv:KhEJz2+Nl9sxjRe0FmHOXi64QtsxDZhagnYt08sqU4E=,tag:vrhBg9qWBiSLPop/5jyIwA==,type:str]
lotte@chir.rs: ENC[AES256_GCM,data:bkzYVXizG/inJ/MS57G2pEiUkA==,iv:jviAx1B83wPhc128msfSs7oYwRQH+j7PU0aAmNbwi88=,tag:ylYl5k9R5BdLGAXOXVeLZg==,type:str]
@ -41,8 +44,8 @@ sops:
Ync4ejJHR0RXTkpqVzFRQXhEVlFVZjgKPo209jJf8Lwn1j3VmLC+j0633zdbt2yf
bPwO7dlKYGbGeGObprNtBXBS2cUXHeuQ45vRpTtg1cpxYK+TfNH8vQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-01-19T13:37:49Z"
mac: ENC[AES256_GCM,data:yHvblUegvh9UvFYLC1PNmFWgKiXPKdJs15N0YYcCoV9IfzCBs2LgwyIFixU8aw5wU59QbuMKMD9rQ232XX++mFVENrO1GLSq0okitWD43IIpOk1o7PjCXmjiVR2L883wunCiQxPd8MJYLHI78IQQkQtagZAwZ8tUn+/8B1irfuY=,iv:xGECnQTuUj5oDJgTtcmbf1CAVdtkhGg+y4unIPgdbUc=,tag:DTegWEqMMlpZMNaDY0wNww==,type:str]
lastmodified: "2022-01-20T08:56:25Z"
mac: ENC[AES256_GCM,data:o7Ssj3mTwoYQN4TeveWxqn9oP/d7ZBw0I/KRfthhFv0ry+avBuIAr4ocgSKC6oCwnp3rNCr3pEsN+wN4kpidQ213ytvP8tSegn936i8WiU2ozD/jBHlRtRQg1abDau8rOps6W65dMBrqoGUDRVdrIsfp63K3myT8pv74u9dkYew=,iv:LU3chaUBP6FOhdR0Ua3YF+OsyEb2utmlnGxacZIcqc4=,tag:WgWXaduAXEbXj3czGHM+CA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.7.1