2017-08-12 11:47:52 +02:00
|
|
|
# nixos-mailserver: a simple mail server
|
|
|
|
# Copyright (C) 2016-2017 Robin Raymond
|
|
|
|
#
|
|
|
|
# This program is free software: you can redistribute it and/or modify
|
|
|
|
# it under the terms of the GNU General Public License as published by
|
|
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
|
|
# (at your option) any later version.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
|
|
|
2017-09-02 15:08:50 +02:00
|
|
|
{ config, pkgs, lib, ... }:
|
2017-08-12 11:47:52 +02:00
|
|
|
|
2017-08-13 11:51:07 +02:00
|
|
|
let
|
2017-09-02 15:08:50 +02:00
|
|
|
cfg = config.mailserver;
|
|
|
|
|
|
|
|
create_certificate = if cfg.certificateScheme == 2 then
|
2017-09-03 15:56:36 +02:00
|
|
|
builtins.readFile ./script/create_certificate
|
2017-08-13 11:51:07 +02:00
|
|
|
else "";
|
2017-08-23 17:22:44 +02:00
|
|
|
|
2017-09-02 15:08:50 +02:00
|
|
|
dkim_key = "${cfg.dkimKeyDirectory}/${cfg.dkimSelector}.private";
|
|
|
|
dkim_txt = "${cfg.dkimKeyDirectory}/${cfg.dkimSelector}.txt";
|
2017-09-03 16:00:10 +02:00
|
|
|
create_dkim_cert = builtins.readFile ./script/create_dkim_certificate;
|
2017-08-13 11:51:07 +02:00
|
|
|
in
|
2017-08-12 11:47:52 +02:00
|
|
|
{
|
2017-09-02 15:08:50 +02:00
|
|
|
config = with cfg; lib.mkIf enable {
|
2017-09-03 15:31:37 +02:00
|
|
|
# Make sure postfix gets started first, so that the certificates are in place
|
2017-09-02 15:08:50 +02:00
|
|
|
systemd.services.dovecot2.after = [ "postfix.service" ];
|
2017-08-13 11:51:07 +02:00
|
|
|
|
2017-09-03 15:31:37 +02:00
|
|
|
# Create certificates and maildir folder
|
2017-09-02 15:08:50 +02:00
|
|
|
systemd.services.postfix = {
|
|
|
|
preStart =
|
|
|
|
''
|
2017-09-02 12:15:22 +02:00
|
|
|
# Create mail directory and set permissions. See
|
|
|
|
# <http://wiki2.dovecot.org/SharedMailboxes/Permissions>.
|
2017-09-03 15:56:36 +02:00
|
|
|
mkdir -p "${mailDirectory}"
|
|
|
|
chgrp "${vmailGroupName}" "${mailDirectory}"
|
|
|
|
chmod 02770 "${mailDirectory}"
|
2017-08-23 17:34:34 +02:00
|
|
|
|
2017-09-02 15:08:50 +02:00
|
|
|
${create_certificate}
|
|
|
|
'';
|
|
|
|
};
|
2017-08-23 17:34:34 +02:00
|
|
|
|
2017-09-03 15:31:37 +02:00
|
|
|
# Create dkim certificates
|
2017-09-02 15:08:50 +02:00
|
|
|
systemd.services.rmilter = {
|
|
|
|
preStart =
|
|
|
|
''
|
2017-09-03 15:31:37 +02:00
|
|
|
${create_dkim_cert}
|
2017-09-02 15:08:50 +02:00
|
|
|
'';
|
|
|
|
};
|
2017-08-23 17:34:34 +02:00
|
|
|
|
2017-08-23 17:22:44 +02:00
|
|
|
};
|
2017-08-12 11:47:52 +02:00
|
|
|
}
|