absolute dog email setup
This commit is contained in:
@@ -1,5 +1,8 @@
|
||||
{ config, pkgs, modulesPath, lib, ... }:
|
||||
|
||||
let
|
||||
tmp_dovecot_passwords = "kopatz:{PLAIN}password:5000:5000::/home/kopatz";
|
||||
in
|
||||
{
|
||||
imports = [
|
||||
# Include the results of the hardware scan.
|
||||
@@ -42,7 +45,6 @@
|
||||
variant = "us";
|
||||
};
|
||||
hardware = {
|
||||
firmware.enable = true;
|
||||
ssd.enable = true;
|
||||
};
|
||||
misc = {
|
||||
@@ -105,6 +107,93 @@
|
||||
virtualisation.vmware.guest.enable = true;
|
||||
services.xserver.videoDrivers = [ "vmware" ];
|
||||
|
||||
users = {
|
||||
users = {
|
||||
vmail = {
|
||||
isSystemUser = true;
|
||||
description = "Virtual mail user";
|
||||
home = "/data/vmail";
|
||||
uid = 5000;
|
||||
group = "vmail";
|
||||
};
|
||||
};
|
||||
groups = {
|
||||
vmail = {
|
||||
gid = 5000;
|
||||
};
|
||||
};
|
||||
};
|
||||
systemd.tmpfiles.rules = [ "d /data/vmail 0700 vmail vmail -" ];
|
||||
services.postfix = {
|
||||
enable = true;
|
||||
settings.main = {
|
||||
myhostname = "mail-kopatz.duckdns.org";
|
||||
mydomain = "mail-kopatz.duckdns.org";
|
||||
#myorigin = "$mydomain";
|
||||
mynetworks = [ "127.0.0.0/8" "192.168.0.0/24" "192.168.2.0/24" ];
|
||||
mydestination = [ "localhost.$mydomain" "localhost" ];
|
||||
recipient_delimiter = "+";
|
||||
virtual_mailbox_domains = [ "mail-kopatz.duckdns.org" ];
|
||||
virtual_mailbox_base = "/data/vmail";
|
||||
virtual_mailbox_maps = "hash:/etc/postfix/virtual-map";
|
||||
virtual_uid_maps = "static:${toString config.users.users.vmail.uid}";
|
||||
virtual_gid_maps = "static:${toString config.users.groups.vmail.gid}";
|
||||
virtual_transport = "virtual";
|
||||
local_transport = "virtual";
|
||||
local_recipient_maps = "$virtual_mailbox_maps";
|
||||
};
|
||||
virtual = ''
|
||||
root@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
mailer-daemon@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
postmaster@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
nobody@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
hostmaster@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
usenet@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
news@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
webmaster@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
www@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
ftp@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
abuse@mail-kopatz.duckdns.org kopatz@mail-kopatz.duckdns.org
|
||||
'';
|
||||
mapFiles = {
|
||||
"virtual-map" = pkgs.writeText "postfix-virtual" ''
|
||||
kopatz@mail-kopatz.duckdns.org mail-kopatz.duckdns.org/kopatz/
|
||||
test@mail-kopatz.duckdns.org mail-kopatz.duckdns.org/test/
|
||||
'';
|
||||
};
|
||||
};
|
||||
services.dovecot2 = {
|
||||
enable = true;
|
||||
enableImap = true;
|
||||
enablePAM = false;
|
||||
configFile = pkgs.writeText "dovecot.conf" ''
|
||||
default_internal_user = ${config.services.dovecot2.user}
|
||||
default_internal_group = ${config.services.dovecot2.group}
|
||||
passdb {
|
||||
driver = passwd-file
|
||||
args = scheme=CRYPT username_format=%u /etc/dovecot-users
|
||||
}
|
||||
|
||||
userdb {
|
||||
driver = passwd-file
|
||||
args = username_format=%u /etc/dovecot-users
|
||||
default_fields = uid=vmail gid=vmail home=/home/vmail/%u
|
||||
}
|
||||
mail_location = maildir:/data/vmail/mail-kopatz.duckdns.org/%n
|
||||
|
||||
ssl = no
|
||||
disable_plaintext_auth = no
|
||||
auth_mechanisms = plain
|
||||
'';
|
||||
};
|
||||
environment.etc."dovecot-users".text = tmp_dovecot_passwords;
|
||||
|
||||
# 8888 = scheibenmeister skip button
|
||||
# 25 = stmp -> postfix
|
||||
# 143 = imap -> dovecot
|
||||
networking.firewall.allowedTCPPorts = [ 25565 25566 8888 25 143 ];
|
||||
networking.hostName = "server-vm"; # Define your hostname.
|
||||
|
||||
#services.murmur = {
|
||||
# enable = true;
|
||||
# openFirewall = true;
|
||||
@@ -130,9 +219,6 @@
|
||||
options = [ "defaults" "nofail" "noatime" ];
|
||||
};
|
||||
|
||||
# 8888 = scheibenmeister skip button
|
||||
networking.firewall.allowedTCPPorts = [ 25565 25566 8888 ];
|
||||
networking.hostName = "server-vm"; # Define your hostname.
|
||||
|
||||
# Configure console keymap
|
||||
console.keyMap = "us";
|
||||
|
||||
Reference in New Issue
Block a user