sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: make some secrets intermediary

Browse source
This commit is contained in:
oddlama 2024-11-29 14:03:54 +01:00
parent 3becfbbf19
commit 4e9a9de858
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 6 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

13
hosts/envoy/idmail.nix
View file

@ -11,7 +11,7 @@ let
mkRandomSecret = {
generator.script = "alnum";
mode = "000";
intermediary = true;
};
mkArgon2id = secret: {
@ -65,13 +65,10 @@ in
inherit (domainCfg) public;
}
);
mailboxes = lib.flip lib.mapAttrs' globals.mail.domains (
_domain: _domainCfg:
lib.nameValuePair "catch-all@${primaryDomain}" {
password_hash = "%{file:${config.age.secrets.idmail-mailbox-hash_catch-all.path}}%";
owner = "admin";
}
);
mailboxes."catch-all@${primaryDomain}" = {
password_hash = "%{file:${config.age.secrets.idmail-mailbox-hash_catch-all.path}}%";
owner = "admin";
};
# XXX: create mailboxes for git@ vaultwarden@ and simultaneously alias them to the catch all for a send only mail.
};
};

3
hosts/envoy/stalwart-mail.nix
View file

@ -23,7 +23,7 @@ in
age.secrets.stalwart-admin-pw = {
generator.script = "alnum";
mode = "000";
intermediary = true;
};
age.secrets.stalwart-admin-hash = {
@ -585,7 +585,6 @@ in
"${cfg.package}/bin/stalwart-mail --config=/run/stalwart-mail/config.toml"
];
RestartSec = "60"; # Retry every minute
CacheDirectory = lib.trace "remove stalwart cache soon, it's upstream" "stalwart-mail";
};
};