This repository has no description
mailserver: fix /var/vmail permissions via homeMode override
nixos-mailserver mkForces the virtualMail user without homeMode,
causing NixOS activation to reset /var/vmail to 0700 on every deploy.
Override at the same priority to set homeMode=2770, replacing the
chmod workaround in ExecStartPost.
author
lassulus
date
(Mar 8, 2026, 1:24 AM CET)
commit
9f30843d
9f30843d964014b87360813045ab4213b2a9208d
parent
be83323b
be83323babf58e1d7b185b51fa52cf634ad61546
+3
-2
+3
-2
2configs/mailserver.nix
+3
-2
2configs/mailserver.nix
···
69
69
stateVersion = 3;
70
70
};
71
71
72
-
# dovecot pre-start creates /var/vmail with 0700; widen for lass (virtualMail group)
72
+
# nixos-mailserver mkForces virtualMail without homeMode; match its priority
73
+
users.users.virtualMail = lib.mkOverride 50 { homeMode = "2770"; };
74
+
73
75
# POSIX ACL default ensures new files inherit lass access (needed for muchsync hardlinks)
74
76
systemd.services.dovecot.serviceConfig.ExecStartPost = [
75
-
"+${pkgs.coreutils}/bin/chmod 2770 /var/vmail"
76
77
"+${pkgs.acl}/bin/setfacl -R -m u:lass:rwX /var/vmail/lassul.us/lass/mail"
77
78
"+${pkgs.acl}/bin/setfacl -R -d -m u:lass:rwX /var/vmail/lassul.us/lass/mail"
78
79
];