97 lines
1.7 KiB
Nix
97 lines
1.7 KiB
Nix
{
|
|
self,
|
|
tree,
|
|
lib,
|
|
inputs,
|
|
config,
|
|
pkgs,
|
|
hostPath,
|
|
...
|
|
}: let
|
|
inherit (lib.modules) mkMerge mkForce;
|
|
|
|
ports = [
|
|
# SMTP
|
|
25
|
|
# Submission
|
|
587
|
|
# Submission w/ SSL
|
|
465
|
|
# IMAP
|
|
143
|
|
# IMAP w/ SSL
|
|
993
|
|
# Sieve
|
|
4190
|
|
];
|
|
|
|
sharedFiles = [
|
|
"/var/lib/acme/mail.owo.monster/fullchain.pem"
|
|
"/var/lib/acme/mail.owo.monster/key.pem"
|
|
];
|
|
in {
|
|
containers.mail = {
|
|
autoStart = true;
|
|
|
|
bindMounts = mkMerge (map (file: {
|
|
"${file}" = {
|
|
hostPath = "${file}";
|
|
};
|
|
})
|
|
sharedFiles);
|
|
|
|
specialArgs = {
|
|
inherit inputs;
|
|
inherit tree;
|
|
inherit self;
|
|
inherit hostPath;
|
|
};
|
|
|
|
config = {...}: {
|
|
nixpkgs.pkgs = pkgs;
|
|
|
|
imports = with tree;
|
|
[
|
|
presets.nixos.containerBase
|
|
|
|
./secrets.nix
|
|
]
|
|
++ (with hosts.hetzner-arm.containers.mail; [
|
|
modules.mailserver
|
|
|
|
profiles.mailserver
|
|
profiles.restic
|
|
]);
|
|
|
|
systemd.tmpfiles.rules = [
|
|
"d /var/lib/acme - root root"
|
|
"d /var/lib/acme/mail.owo.monster - root root"
|
|
];
|
|
|
|
networking.firewall = {
|
|
enable = mkForce false;
|
|
};
|
|
|
|
home-manager.users.root.home.stateVersion = "23.05";
|
|
system.stateVersion = "23.05";
|
|
};
|
|
};
|
|
|
|
# ssl for mail
|
|
services.nginx = {
|
|
enable = true;
|
|
virtualHosts."mail.owo.monster" = {
|
|
serverName = "mail.owo.monster";
|
|
serverAliases = ["owo.monster"];
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
acmeRoot = "/var/lib/acme/acme-challenge";
|
|
};
|
|
};
|
|
|
|
networking.firewall = {
|
|
allowedTCPPorts = ports;
|
|
allowedUDPPorts = ports;
|
|
};
|
|
}
|