forked from
lass.pds.lassul.us/superconfig
This repository has no description
mail: add Thunderbird autoconfig and fix vmail permissions
- Add autoconfig XML endpoint on autoconfig.lassul.us via nginx
- Add DNS SRV records for IMAPS and SMTP submission (RFC 6186)
- Fix vmail tmpfiles rules to use 2770 to match dovecot pre-start
author
lassulus
date
(Mar 6, 2026, 9:31 PM CET)
commit
13e85b11
13e85b11a71f184536098e533e44431953fdd0a8
parent
db6d8173
db6d817358514c95f28fb493f146218435b6f04b
+40
-5
+35
-4
2configs/mailserver.nix
+35
-4
2configs/mailserver.nix
···
131
131
users.groups.virtualMail.members = [ "lass" ];
132
132
systemd.tmpfiles.rules = [
133
133
"L+ /home/lass/Maildir - - - - /var/vmail/lassul.us/lass/mail"
134
-
"z /var/vmail 0750 virtualMail virtualMail -"
135
-
"z /var/vmail/lassul.us 0750 virtualMail virtualMail -"
136
-
"z /var/vmail/lassul.us/lass 0750 virtualMail virtualMail -"
137
-
"Z /var/vmail/lassul.us/lass/mail 0770 virtualMail virtualMail -"
134
+
# dovecot pre-start sets /var/vmail to 02770 already; just fix subdirs
135
+
"z /var/vmail/lassul.us 2770 virtualMail virtualMail -"
136
+
"z /var/vmail/lassul.us/lass 2770 virtualMail virtualMail -"
137
+
"Z /var/vmail/lassul.us/lass/mail 2770 virtualMail virtualMail -"
138
138
];
139
+
140
+
# Thunderbird autoconfig
141
+
services.nginx.virtualHosts."autoconfig.lassul.us" = {
142
+
forceSSL = true;
143
+
enableACME = true;
144
+
locations."= /mail/config-v1.1.xml".extraConfig = ''
145
+
default_type application/xml;
146
+
return 200 '<?xml version="1.0" encoding="UTF-8"?>
147
+
<clientConfig version="1.1">
148
+
<emailProvider id="lassul.us">
149
+
<domain>lassul.us</domain>
150
+
<displayName>lassul.us Mail</displayName>
151
+
<displayShortName>lassul.us</displayShortName>
152
+
<incomingServer type="imap">
153
+
<hostname>mail.lassul.us</hostname>
154
+
<port>993</port>
155
+
<socketType>SSL</socketType>
156
+
<authentication>password-cleartext</authentication>
157
+
<username>%EMAILADDRESS%</username>
158
+
</incomingServer>
159
+
<outgoingServer type="smtp">
160
+
<hostname>mail.lassul.us</hostname>
161
+
<port>465</port>
162
+
<socketType>SSL</socketType>
163
+
<authentication>password-cleartext</authentication>
164
+
<username>%EMAILADDRESS%</username>
165
+
</outgoingServer>
166
+
</emailProvider>
167
+
</clientConfig>';
168
+
'';
169
+
};
139
170
140
171
# notmuch + muchsync + msmtp for CLI mail access
141
172
environment.systemPackages = [
+5
-1
2configs/dns/lassul.us.zone
+5
-1
2configs/dns/lassul.us.zone
···
1
-
@ 3600 IN SOA lassul.us. ns1.lassul.us. 2026030500 7200 3600 86400 3600
1
+
@ 3600 IN SOA lassul.us. ns1.lassul.us. 2026030600 7200 3600 86400 3600
2
2
3
3
;;@ 3600 IN NS ns1
4
4
@ 3600 IN NS ns1
···
68
68
)
69
69
_dmarc IN TXT "v=DMARC1; p=none; adkim=r; aspf=r; rua=mailto:postmaster@lassul.us; ruf=mailto:postmaster@lassul.us; pct=100"
70
70
@ IN TXT "v=spf1 mx -all"
71
+
72
+
;; Autodiscovery (RFC 6186)
73
+
_imaps._tcp IN SRV 5 0 993 mail.lassul.us.
74
+
_submissions._tcp IN SRV 5 0 465 mail.lassul.us.
71
75
72
76
@ IN CAA 0 issue "letsencrypt.org"
73
77
@ IN CAA 0 iodef "mailto:caa@lassul.us"