refactor(services/selfhosts): adding the format to nix files
This commit is contained in:
parent
76eb961891
commit
93d7fabef5
4 changed files with 89 additions and 71 deletions
|
|
@ -1,4 +1,9 @@
|
|||
{ config, pkgs, lib, ... }:
|
||||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
|
||||
let
|
||||
gitDomain = "git.enium.eu";
|
||||
|
|
|
|||
|
|
@ -1,14 +1,14 @@
|
|||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
let
|
||||
cfg = config.service.selfhost.jellyfin;
|
||||
wireguard-key = config.age.secrets."wireguard-secret".path;
|
||||
in
|
||||
{
|
||||
{
|
||||
config = lib.mkIf cfg {
|
||||
virtualisation = {
|
||||
docker.enable = true;
|
||||
|
|
|
|||
|
|
@ -22,7 +22,7 @@ in
|
|||
shell = "/run/current-system/sw/bin/nologin";
|
||||
};
|
||||
users.groups = {
|
||||
vmail = {};
|
||||
vmail = { };
|
||||
};
|
||||
systemd.tmpfiles.rules = [
|
||||
"d /run/dovecot 0755 dovecot dovecot - -"
|
||||
|
|
@ -84,14 +84,22 @@ in
|
|||
chroot = false;
|
||||
command = "smtpd";
|
||||
args = [
|
||||
"-o" "smtpd_recipient_restrictions=permit_sasl_authenticated,reject"
|
||||
"-o" "smtpd_sasl_auth_enable=yes"
|
||||
"-o" "smtpd_sasl_security_options=noanonymous"
|
||||
"-o" "smtpd_sender_login_maps=hash:/var/lib/postfix/sender_login"
|
||||
"-o" "smtpd_sender_restrictions=reject_sender_login_mismatch"
|
||||
"-o" "smtpd_tls_auth_only=yes"
|
||||
"-o" "smtpd_tls_security_level=encrypt"
|
||||
"-o" "syslog_name=postfix/submission"
|
||||
"-o"
|
||||
"smtpd_recipient_restrictions=permit_sasl_authenticated,reject"
|
||||
"-o"
|
||||
"smtpd_sasl_auth_enable=yes"
|
||||
"-o"
|
||||
"smtpd_sasl_security_options=noanonymous"
|
||||
"-o"
|
||||
"smtpd_sender_login_maps=hash:/var/lib/postfix/sender_login"
|
||||
"-o"
|
||||
"smtpd_sender_restrictions=reject_sender_login_mismatch"
|
||||
"-o"
|
||||
"smtpd_tls_auth_only=yes"
|
||||
"-o"
|
||||
"smtpd_tls_security_level=encrypt"
|
||||
"-o"
|
||||
"syslog_name=postfix/submission"
|
||||
];
|
||||
};
|
||||
};
|
||||
|
|
@ -283,10 +291,10 @@ in
|
|||
};
|
||||
|
||||
learn_condition = <<EOD
|
||||
return function(task)
|
||||
return function(task)
|
||||
return true
|
||||
end
|
||||
EOD;
|
||||
end
|
||||
EOD;
|
||||
};
|
||||
|
||||
rbl {
|
||||
|
|
|
|||
|
|
@ -1,4 +1,9 @@
|
|||
{ config, pkgs, lib, ... }:
|
||||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
|
||||
let
|
||||
cfg = config.service.selfhost.nextcloud;
|
||||
|
|
@ -6,7 +11,7 @@ let
|
|||
nextcloud-database = config.age.secrets."nextcloud-database".path;
|
||||
dataDir = "/mnt/data/nextcloud";
|
||||
in
|
||||
{
|
||||
{
|
||||
config = lib.mkIf cfg {
|
||||
environment.systemPackages = with pkgs; [
|
||||
php
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue