refactor(services/selfhosts): adding the format to nix files

This commit is contained in:
Raphael 2026-02-28 16:45:00 +01:00
parent 76eb961891
commit 93d7fabef5
No known key found for this signature in database
4 changed files with 89 additions and 71 deletions

View file

@ -1,4 +1,9 @@
{ config, pkgs, lib, ... }:
{
config,
pkgs,
lib,
...
}:
let
gitDomain = "git.enium.eu";

View file

@ -1,14 +1,14 @@
{
config,
pkgs,
lib,
...
config,
pkgs,
lib,
...
}:
let
cfg = config.service.selfhost.jellyfin;
wireguard-key = config.age.secrets."wireguard-secret".path;
in
{
{
config = lib.mkIf cfg {
virtualisation = {
docker.enable = true;

View file

@ -22,7 +22,7 @@ in
shell = "/run/current-system/sw/bin/nologin";
};
users.groups = {
vmail = {};
vmail = { };
};
systemd.tmpfiles.rules = [
"d /run/dovecot 0755 dovecot dovecot - -"
@ -84,14 +84,22 @@ in
chroot = false;
command = "smtpd";
args = [
"-o" "smtpd_recipient_restrictions=permit_sasl_authenticated,reject"
"-o" "smtpd_sasl_auth_enable=yes"
"-o" "smtpd_sasl_security_options=noanonymous"
"-o" "smtpd_sender_login_maps=hash:/var/lib/postfix/sender_login"
"-o" "smtpd_sender_restrictions=reject_sender_login_mismatch"
"-o" "smtpd_tls_auth_only=yes"
"-o" "smtpd_tls_security_level=encrypt"
"-o" "syslog_name=postfix/submission"
"-o"
"smtpd_recipient_restrictions=permit_sasl_authenticated,reject"
"-o"
"smtpd_sasl_auth_enable=yes"
"-o"
"smtpd_sasl_security_options=noanonymous"
"-o"
"smtpd_sender_login_maps=hash:/var/lib/postfix/sender_login"
"-o"
"smtpd_sender_restrictions=reject_sender_login_mismatch"
"-o"
"smtpd_tls_auth_only=yes"
"-o"
"smtpd_tls_security_level=encrypt"
"-o"
"syslog_name=postfix/submission"
];
};
};
@ -283,10 +291,10 @@ in
};
learn_condition = <<EOD
return function(task)
return function(task)
return true
end
EOD;
end
EOD;
};
rbl {

View file

@ -1,4 +1,9 @@
{ config, pkgs, lib, ... }:
{
config,
pkgs,
lib,
...
}:
let
cfg = config.service.selfhost.nextcloud;
@ -6,7 +11,7 @@ let
nextcloud-database = config.age.secrets."nextcloud-database".path;
dataDir = "/mnt/data/nextcloud";
in
{
{
config = lib.mkIf cfg {
environment.systemPackages = with pkgs; [
php