mirror of
https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git
synced 2026-02-21 09:27:51 +01:00
43 lines
893 B
Nix
43 lines
893 B
Nix
{
|
|
config,
|
|
lib,
|
|
fp,
|
|
pkgs,
|
|
values,
|
|
...
|
|
}:
|
|
let
|
|
cfg = config.services.snappymail;
|
|
in
|
|
{
|
|
imports = [ (fp /modules/snappymail.nix) ];
|
|
|
|
services.snappymail = {
|
|
enable = true;
|
|
hostname = "snappymail.pvv.ntnu.no";
|
|
};
|
|
|
|
services.nginx.virtualHosts.${cfg.hostname} = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
kTLS = true;
|
|
};
|
|
|
|
services.rsync-pull-targets = {
|
|
enable = true;
|
|
locations.${cfg.dataDir} = {
|
|
user = "root";
|
|
rrsyncArgs.ro = true;
|
|
authorizedKeysAttrs = [
|
|
"restrict"
|
|
"from=\"principal.pvv.ntnu.no,${values.hosts.principal.ipv6},${values.hosts.principal.ipv4}\""
|
|
"no-agent-forwarding"
|
|
"no-port-forwarding"
|
|
"no-pty"
|
|
"no-X11-forwarding"
|
|
];
|
|
publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJENMnuNsHEeA91oX+cj7Qpex2defSXP/lxznxCAqV03 snappymail rsync backup";
|
|
};
|
|
};
|
|
}
|