sprechtl/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge remote-tracking branch 'refs/remotes/origin/master'

Browse source
This commit is contained in:
s-prechtl 2025-08-30 18:04:30 +02:00
commit fe8f52a04c
3 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

39
hosts/hitsugibune/mail.nix Normal file
View file

@ -0,0 +1,39 @@
{ config, pkgs, ... }: {
imports = [
(builtins.fetchTarball {
# Pick a release version you are interested in and set its hash, e.g.
url = "https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/archive/nixos-25.05/nixos-mailserver-nixos-25.05.tar.gz";
# To get the sha256 of the nixos-mailserver tarball, we can use the nix-prefetch-url command:
# release="nixos-25.05"; nix-prefetch-url "https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/archive/${release}/nixos-mailserver-${release}.tar.gz" --unpack
sha256 = "1qn5fg0h62r82q7xw54ib9wcpflakix2db2mahbicx540562la1y";
})
];
age.secrets.mail-admin = {
file = ../../secrets/mail-admin.age;
owner = "virtualMail";
group = "virtualMail";
};
mailserver = {
enable = true;
stateVersion = 3;
fqdn = "mail.sprechtl.me";
domains = [ "sprechtl.me" ];
# A list of all login accounts. To create the password hashes, use
# nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
loginAccounts = {
"admin@sprechtl.me" = {
hashedPasswordFile = config.age.secrets.mail-admin.path;
aliases = ["postmaster@sprechtl.me"];
};
};
# Use Let's Encrypt certificates. Note that this needs to set up a stripped
# down nginx and opens port 80.
certificateScheme = "acme-nginx";
};
security.acme.acceptTerms = true;
security.acme.defaults.email = "stefan@tague.at";
}