simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

mailserver: Add option for autoconfig

Browse source
This commit is contained in:
Simon Bruder 2023-05-31 12:38:28 +02:00
parent 21e139f313
commit f84e6d9bee
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
2 changed files with 40 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
machines/vueko/configuration.nix
View file

@ -24,6 +24,7 @@
"psycho-power-papagei.de"
"sbruder.de"
];
autoconfig.enable = true;
users = import ./secrets/mail-users.nix;
rejectSenders = import ./secrets/mail-reject-senders.nix;
};

39
modules/mailserver.nix
View file

@ -27,6 +27,9 @@ in
description = "Domains to serve";
example = [ "example.com" "example.org" ];
};
autoconfig = {
enable = mkEnableOption "autoconfiguration of compatible clients. Requires autoconfig.<domain> to exist for all specified domains";
};
users = mkOption {
type = listOf (submodule {
options = {
@ -541,5 +544,41 @@ in
};
users.users.postfix.extraGroups = lib.mkIf cfg.dkim.enable (lib.singleton config.users.users.opendkim.group);
# Autoconfig
services.nginx = lib.mkIf cfg.autoconfig.enable {
enable = true;
virtualHosts = lib.listToAttrs (map
(domain: lib.nameValuePair "autoconfig.${domain}" {
enableACME = true;
forceSSL = true;
locations."=/mail/config-v1.1.xml".alias = pkgs.writeText "config-v1.1.xml" ''
<?xml version="1.0" encoding="UTF-8"?>
<clientConfig version="1.1">
<emailProvider id="${lib.escapeXML domain}">
<domain>${lib.escapeXML domain}</domain>
<displayName>${lib.escapeXML domain}</displayName>
<displayShortName>${lib.escapeXML domain}</displayShortName>
<incomingServer type="imap">
<hostname>${lib.escapeXML cfg.fqdn}</hostname>
<port>993</port>
<socketType>SSL</socketType>
<authentication>password-cleartext</authentication>
<username>%EMAILADDRESS%</username>
</incomingServer>
<outgoingServer type="smtp">
<hostname>${lib.escapeXML cfg.fqdn}</hostname>
<port>465</port>
<socketType>SSL</socketType>
<authentication>password-cleartext</authentication>
<username>%EMAILADDRESS%</username>
</outgoingServer>
</emailProvider>
</clientConfig>
'';
})
cfg.domains);
};
};
}