mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

chore: consolidate catch all mailboxes for easier use

Browse source
This commit is contained in:
oddlama 2024-08-01 01:52:05 +02:00
parent 95818b6fcf
commit 198f78622a
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
40 changed files with 38 additions and 258 deletions
Download patch file Download diff file Expand all files Collapse all files

32
hosts/envoy/idmail.nix
View file

@ -18,8 +18,6 @@
mode = "440";
group = "stalwart-mail";
};
shortHash = x: lib.substring 0 16 (builtins.hashString "sha256" "${globals.salt}:${x}");
in {
environment.persistence."/persist".directories = lib.trace "stalwart backups to dusk!" [
{
@ -30,20 +28,12 @@ in {
}
];
age.secrets = lib.mergeAttrsList (
[
{
idmail-user-pw_admin = mkRandomSecret;
idmail-user-hash_admin = mkArgon2id "idmail-user-pw_admin";
}
]
++ lib.forEach (lib.attrNames globals.mail.domains) (
domain: {
"idmail-mailbox-pw_catch-all@${shortHash domain}" = mkRandomSecret;
"idmail-mailbox-hash_catch-all@${shortHash domain}" = mkArgon2id "idmail-mailbox-pw_catch-all@${shortHash domain}";
}
)
);
age.secrets = {
idmail-user-pw_admin = mkRandomSecret;
idmail-user-hash_admin = mkArgon2id "idmail-user-pw_admin";
idmail-mailbox-pw_catch-all = mkRandomSecret;
idmail-mailbox-hash_catch-all = mkArgon2id "idmail-mailbox-pw_catch-all";
};
globals.services.idmail.domain = idmailDomain;
globals.monitoring.http.idmail = {
@ -64,15 +54,15 @@ in {
admin = true;
password_hash = "%{file:${config.age.secrets.idmail-user-hash_admin.path}}%";
};
domains = lib.flip lib.mapAttrs globals.mail.domains (domain: domainCfg: {
domains = lib.flip lib.mapAttrs globals.mail.domains (_domain: domainCfg: {
owner = "admin";
catch_all = "catch-all@${domain}";
catch_all = "catch-all@${primaryDomain}";
inherit (domainCfg) public;
});
mailboxes = lib.flip lib.mapAttrs' globals.mail.domains (
domain: _domainCfg:
lib.nameValuePair "catch-all@${domain}" {
password_hash = "%{file:${config.age.secrets."idmail-mailbox-hash_catch-all@${shortHash domain}".path}}%";
_domain: _domainCfg:
lib.nameValuePair "catch-all@${primaryDomain}" {
password_hash = "%{file:${config.age.secrets.idmail-mailbox-hash_catch-all.path}}%";
owner = "admin";
}
);