42 lines
1.2 KiB
Nix
42 lines
1.2 KiB
Nix
{
|
|
pkgs,
|
|
config,
|
|
lib,
|
|
...
|
|
}: {
|
|
services.postfixadmin = {
|
|
enable = true;
|
|
adminEmail = "lotte@chir.rs";
|
|
database = {
|
|
dbname = "postfix";
|
|
host = "localhost";
|
|
passwordFile = "/run/secrets/services/postfixadmin/dbpassword";
|
|
username = "postfixadmin";
|
|
};
|
|
hostName = "mail.chir.rs";
|
|
setupPasswordFile = "/run/secrets/services/postfixadmin/setupPassword";
|
|
extraConfig = ''
|
|
$CONF['encrypt'] = 'dovecot:ARGON2ID';
|
|
$CONF['dovecotpw'] = '${pkgs.dovecot}/bin/doveadm pw';
|
|
'';
|
|
};
|
|
sops.secrets."services/postfixadmin/dbpassword" = {
|
|
owner = "postfixadmin";
|
|
};
|
|
sops.secrets."services/postfixadmin/setupPassword" = {
|
|
owner = "postfixadmin";
|
|
};
|
|
services.postgresql.ensureDatabases = ["postfix"];
|
|
services.caddy.virtualHosts."mail.chir.rs" = {
|
|
useACMEHost = "chir.rs";
|
|
logFormat = pkgs.lib.mkForce "";
|
|
extraConfig = ''
|
|
import baseConfig
|
|
|
|
root * ${pkgs.postfixadmin}/public
|
|
php_fastcgi unix:${config.services.phpfpm.pools.postfixadmin.socket}
|
|
'';
|
|
};
|
|
services.phpfpm.pools.postfixadmin.settings."listen.group" = "acme"; # there is no nginx group
|
|
services.phpfpm.pools.postfixadmin.group = "dovecot";
|
|
}
|