Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l exim-smarthost: fix ssl for mail.lassul.us

Browse Source
This commit is contained in:
lassulus 2023-09-03 12:04:27 +02:00
parent 90ca326b59
commit eb00c6b977
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
lass/2configs/exim-smarthost.nix
View File

@ -14,18 +14,22 @@ in {
dkim = [ dkim = [
{ domain = "lassul.us"; } { domain = "lassul.us"; }
]; ];
ssl_cert = "/var/lib/acme/mail.lassul.us/fullchain.pem";
ssl_key = "/var/lib/acme/mail.lassul.us/key.pem";
primary_hostname = "lassul.us"; primary_hostname = "lassul.us";
sender_domains = [ sender_domains = [
"lassul.us" "lassul.us"
]; ];
relay_from_hosts = map (host: host.nets.retiolum.ip6.addr) [ relay_from_hosts = map (host: host.nets.retiolum.ip6.addr) [
config.krebs.hosts.aergia
config.krebs.hosts.blue config.krebs.hosts.blue
config.krebs.hosts.coaxmetal config.krebs.hosts.coaxmetal
config.krebs.hosts.green config.krebs.hosts.green
config.krebs.hosts.mors config.krebs.hosts.mors
config.krebs.hosts.xerxes config.krebs.hosts.xerxes
]; ];
internet-aliases = map (from: { inherit from to; }) mails; internet-aliases = map (from: { inherit from to; }) mails ++ [
];
system-aliases = [ system-aliases = [
{ from = "mailer-daemon"; to = "postmaster"; } { from = "mailer-daemon"; to = "postmaster"; }
{ from = "postmaster"; to = "root"; } { from = "postmaster"; to = "root"; }
@ -45,4 +49,14 @@ in {
krebs.iptables.tables.filter.INPUT.rules = [ krebs.iptables.tables.filter.INPUT.rules = [
{ predicate = "-p tcp --dport smtp"; target = "ACCEPT"; } { predicate = "-p tcp --dport smtp"; target = "ACCEPT"; }
]; ];
security.acme.certs."mail.lassul.us" = {
group = "lasscert";
webroot = "/var/lib/acme/acme-challenge";
};
users.groups.lasscert.members = [
"dovecot2"
"exim"
"nginx"
];
} }