129 lines
3.5 KiB
Nix
129 lines
3.5 KiB
Nix
# nixos-mailserver: a simple mail server
|
|
# Copyright (C) 2016-2017 Robin Raymond
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
|
|
{ config, pkgs, ... }:
|
|
|
|
let
|
|
|
|
#
|
|
# The domain that this mail server serves. So far only one domain is supported
|
|
#
|
|
domain = "example.com";
|
|
|
|
#
|
|
# The prefix of the FQDN of the server. In this example the FQDN of the server
|
|
# is given by 'mail.example.com'
|
|
#
|
|
host_prefix = "mail";
|
|
|
|
#
|
|
# The login account of the domain. Every account is mapped to a unix user,
|
|
# e.g. `user1@example.com`.
|
|
#
|
|
login_accounts = [ "user1" "user2" ];
|
|
|
|
#
|
|
# Virtual Aliases. A virtual alias { from = "info"; to = "user1"; } means that
|
|
# all mail to `info@example.com` is forwarded to `user1@example.com`. Note
|
|
# that it is expected that `postmaster@example.com` and `abuse@example.com` is
|
|
# forwarded to some valid email address. (Alternatively you can create login
|
|
# accounts for `postmaster` and (or) `abuse`).
|
|
#
|
|
valiases = [
|
|
{ from = "info";
|
|
to = "user1";
|
|
}
|
|
{ from = "postmaster";
|
|
to = "user1";
|
|
}
|
|
{ from = "abuse";
|
|
to = "user1";
|
|
}
|
|
];
|
|
|
|
#
|
|
# The unix UID where the login_accounts are created. 5000 means that the first
|
|
# user will get 5000, the second 5001, ...
|
|
#
|
|
vmail_id_start = 5000;
|
|
|
|
#
|
|
# The user name and group name of the user that owns the directory where all
|
|
# the mail is stored.
|
|
#
|
|
vmail_user_name = "vmail";
|
|
vmail_group_name = "vmail";
|
|
|
|
#
|
|
# Where to store the mail.
|
|
#
|
|
mail_dir = "/var/vmail";
|
|
|
|
#
|
|
# Certificate Files. There are three options for these.
|
|
#
|
|
# 1) You specify locations and manually copy certificates there.
|
|
# 2) You let the server create new (self signed) certificates on the fly.
|
|
# 3) You let the server create a certificate via `Let's Encrypt`. Not that
|
|
# this implies that a stripped down webserver has to be started.
|
|
#
|
|
cert_file = "mail-server.crt";
|
|
key_file = "mail-server.key";
|
|
|
|
#
|
|
# Whether to enable imap / pop3. Both variants are only supported in the
|
|
# (sane) startTLS configuration. (TODO: Allow SSL ports). The ports are
|
|
#
|
|
# 110 - Pop3
|
|
# 143 - IMAP
|
|
# 587 - SMTP with login
|
|
#
|
|
enable_imap = true;
|
|
enable_pop3 = false;
|
|
imap_ssl = false;
|
|
pop3_ssl = false;
|
|
|
|
#
|
|
# Whether to activate virus scanning. Note that virus scanning is _very_
|
|
# expensive memory wise.
|
|
# TODO: Implement
|
|
#
|
|
virus_scanning = false;
|
|
in
|
|
{
|
|
services = import ./mail-server/services.nix {
|
|
inherit mail_dir vmail_user_name vmail_group_name valiases domain
|
|
enable_imap enable_pop3;
|
|
};
|
|
|
|
environment = import ./mail-server/environment.nix {
|
|
inherit pkgs;
|
|
};
|
|
|
|
networking = import ./mail-server/networking.nix {
|
|
inherit domain host_prefix;
|
|
};
|
|
|
|
systemd = import ./mail-server/systemd.nix {
|
|
inherit mail_dir vmail_group_name;
|
|
};
|
|
|
|
users = import ./mail-server/users.nix {
|
|
inherit vmail_id_start vmail_user_name vmail_group_name domain mail_dir
|
|
login_accounts;
|
|
};
|
|
}
|