RGBCube/ncc
1
Fork 0
mirror of https://github.com/RGBCube/ncc synced 2025-07-30 11:37:44 +00:00
Code Issues Activity

Add backup mail server

Browse source
This commit is contained in:
RGBCube 2024-05-24 22:00:29 +03:00
parent afcaada363
commit 13716ee5c0
No known key found for this signature in database
5 changed files with 27 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/cube/hardware.nix
View file

@ -1,7 +1,7 @@
{ lib, modulesPath, ... }: with lib;
systemConfiguration {
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
boot.loader.grub = enabled {
device = "/dev/vda";

14
hosts/disk/mail/default.nix
View file

@ -1,10 +1,12 @@
{ config, lib, ... }: with lib;
{ self, config, lib, ... }: with lib;
let
inherit (config.networking) domain;
fqdn = "mail.${domain}";
in systemConfiguration {
imports = [(self + /hosts/cube/acme)];
secrets.mailPassword.file = ./password.hash.age;
services.prometheus.exporters.postfix = enabled {
@ -12,9 +14,9 @@ in systemConfiguration {
};
mailserver = enabled {
inherit fqdn;
fqdn = mkDefault fqdn;
domains = [ domain ];
domains = mkDefault [ domain ];
certificateScheme = "acme";
# We use systemd-resolved instead of Knot Resolver.
@ -31,7 +33,7 @@ in systemConfiguration {
vmailGroupName = "mail";
dmarcReporting = enabled {
inherit domain;
domain = head config.mailserver.domains;
organizationName = "Doofemshmirtz Evil Inc.";
};
@ -40,8 +42,8 @@ in systemConfiguration {
indexAttachments = true;
};
loginAccounts."contact@${domain}" = {
aliases = [ "@${domain}" ];
loginAccounts."contact@${head config.mailserver.domains}" = {
aliases = [ "@${head config.mailserver.domains}" ];
hashedPasswordFile = config.secrets.mailPassword.path;
};

2
hosts/nine/hardware.nix
View file

@ -1,7 +1,7 @@
{ config, lib, modulesPath, ... }: with lib;
systemConfiguration {
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
boot.loader.grub = enabled {
efiSupport = true;

16
hosts/nine/mail2.nix Normal file
View file

@ -0,0 +1,16 @@
{ config, self, lib, ... }: with lib;
let
inherit (config.networking) domain;
fqdn = "mail2.${domain}";
in systemConfiguration {
imports = [(self + /hosts/disk/mail)];
mailserver = {
inherit fqdn;
# Not [ domain ] because this is a backup mailserver. contact@mail2.rgbcu.be.
domains = [ fqdn ];
};
}

2
hosts/tard/hardware.nix
View file

@ -1,7 +1,7 @@
{ lib, modulesPath, ... }: with lib;
systemConfiguration {
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
imports = [(modulesPath + "/profiles/qemu-guest.nix")];
boot.loader.grub = enabled {
device = "/dev/vda";