This repository has no description
1.6 kB
58 lines
1{ config, lib, pkgs, ... }:
2{
3 security.acme.certs."mail.lassul.us" = {
4 group = "lasscert";
5 webroot = "/var/lib/acme/acme-challenge";
6 };
7 users.groups.lasscert.members = [
8 "exim"
9 "nginx"
10 ];
11
12 clanCore.secrets."lassul.us-dkim" = {
13 secrets."lassul.us.dkim.priv" = { };
14 facts."lassul.us.dkim.pub" = { };
15 generator.path = with pkgs; [ coreutils openssl ];
16 generator.script = ''
17 openssl genrsa -out "$secrets"/lassul.us.dkim.priv 2048
18 openssl rsa -in "$secrets"/lassul.us.dkim.priv -pubout -outform der 2>/dev/null | openssl base64 -A > "$facts"/lassul.us.dkim.pub
19 '';
20 };
21
22 krebs.exim-smarthost = {
23 enable = true;
24 primary_hostname = "lassul.us";
25 dkim = [
26 { domain = "lassul.us"; }
27 ];
28 ssl_cert = "/var/lib/acme/mail.lassul.us/fullchain.pem";
29 ssl_key = "/var/lib/acme/mail.lassul.us/key.pem";
30 local_domains = [
31 "localhost"
32 "lassul.us"
33 "ubikmedia.eu"
34 "ubikmedia.de"
35 "apanowicz.de"
36 "alewis.de"
37 "jarugadesign.de"
38 "beesmooth.ch"
39 "event-extra.de"
40 "jla-trading.com"
41 ];
42 extraRouters = ''
43 forward_lassul_us:
44 driver = manualroute
45 domains = lassul.us
46 transport = remote_smtp
47 route_list = * orange.r
48 no_more
49
50 forward_ubik:
51 driver = manualroute
52 domains = ubikmedia.eu:ubikmedia.de:apanowicz.de:alewis.de:jarugadesign.de:beesmooth.ch:event-extra.de:jla-trading.com
53 transport = remote_smtp
54 route_list = * ubik.r
55 no_more
56 '';
57 };
58}