StuRa/stura-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

kinda working :D

Browse source
This commit is contained in:
Bereich Administration Rechentechnik 2025-03-08 01:16:33 +01:00
parent b1f9d050d3
commit 4e0659f24a
1 changed files with 37 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

42
configuration.nix
View file

@ -70,7 +70,7 @@
mailserver = { mailserver = {
enable = true; enable = true;
fqdn = "mail.htw.stura-dresden.de"; fqdn = "mail.htw.stura-dresden.de";
domains = [ "htw.stura-dresden.de" ]; domains = [ "htw.stura-dresden.de" "mail.htw.stura-dresden.de" ];
ldap = { ldap = {
enable = true; enable = true;
bind = { bind = {
@ -78,11 +78,11 @@
passwordFile = "/var/lib/dovecot_ldap_passwd"; passwordFile = "/var/lib/dovecot_ldap_passwd";
}; };
dovecot = { dovecot = {
userFilter = "(&(objectClass=posixAccount)(cn=%u))"; #userFilter = "(&(objectClass=posixAccount)(cn=%u))";
passFilter = "(&(objectClass=posixAccount)(cn=%u))"; #passFilter = "(&(objectClass=posixAccount)(cn=%u))";
}; };
postfix = { postfix = {
filter = "(&(objectClass=posixUser)(cn=%s))"; #filter = "(&(objectClass=posixUser)(cn=%s))";
}; };
searchBase = "dc=auth,dc=htw,dc=stura-dresden,dc=de"; searchBase = "dc=auth,dc=htw,dc=stura-dresden,dc=de";
uris = [ uris = [
@ -91,13 +91,45 @@
}; };
certificateScheme = "acme-nginx"; certificateScheme = "acme-nginx";
enableImap = true;
enableImapSsl = true;
enableManageSieve = false;
enableSubmission = true;
enableSubmissionSsl = true;
extraVirtualAliases = {};
lmtpSaveToDetailMailbox = "no"; # DOS potential
mailboxes = {
Drafts = {
auto = "subscribe";
specialUse = "Drafts";
}; };
Sent = {
auto = "subscribe";
specialUse = "Sent";
};
Spam = {
auto = "subscribe";
specialUse = "Junk";
};
Trash = {
auto = "subscribe";
specialUse = "Trash";
};
};
maxConnectionsPerUser = 10;
messageSizeLimit = 10 * 1000 * 1024; # 10 MiB
};
services.dovecot2.mailLocation = lib.mkForce "maildir:/var/vmail/%n";
services.postfix.relayHost = "141.56.51.14";
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
security.acme.defaults.email = "cert@stura.htw-dresden.de"; security.acme.defaults.email = "cert@stura.htw-dresden.de";
networking.firewall.allowedTCPPorts = [ 80 443 389 9000 ]; networking.firewall.allowedTCPPorts = [ 25 80 443 597 9000 ];
system.stateVersion = "24.11"; system.stateVersion = "24.11";