This repository has no description
add missing facts and secret/fact generators
author
lassulus
date
(Feb 16, 2024, 5:06 AM CET)
commit
dad15211
dad152112cf5741823a354c6e7cc880557483411
parent
0ac6dfb4
0ac6dfb43ece63b6b3132aa7b56aa3366c7ed95d
+30
+10
2configs/exim-smarthost.nix
+10
2configs/exim-smarthost.nix
···
12
12
];
13
13
environment.systemPackages = [ pkgs.review-mail-queue ];
14
14
15
+
clanCore.secrets."lassul.us-dkim" = {
16
+
secrets."lassul.us.dkim.priv" = { };
17
+
facts."lassul.us.dkim.pub" = { };
18
+
generator.path = with pkgs; [ coreutils openssl ];
19
+
generator.script = ''
20
+
openssl genrsa -out "$secrets"/lassul.us.dkim.priv 2048
21
+
openssl rsa -in "$secrets"/lassul.us.dkim.priv -pubout -outform der 2>/dev/null | openssl base64 -A > "$facts"/lassul.us.dkim.pub
22
+
'';
23
+
};
24
+
15
25
krebs.exim-smarthost = {
16
26
enable = true;
17
27
dkim = [
+8
2configs/binary-cache/server.nix
+8
2configs/binary-cache/server.nix
···
5
5
# };
6
6
# generate private key with:
7
7
# nix-store --generate-binary-cache-key my-secret-key my-public-key
8
+
clanCore.secrets."nix-serve" = {
9
+
secrets."nix-serve.key" = { };
10
+
facts."nix-serve.pub" = { };
11
+
generator.path = with pkgs; [ coreutils nix ];
12
+
generator.script = ''
13
+
nix-store --generate-binary-cache-key "$secrets"/nix-serve.key "$facts"/nix-serve.pub
14
+
'';
15
+
};
8
16
services.nix-serve = {
9
17
enable = true;
10
18
secretKeyFile = "${config.krebs.secret.directory}/nix-serve.key";
+10
2configs/mail/internet-gateway.nix
+10
2configs/mail/internet-gateway.nix
···
9
9
"nginx"
10
10
];
11
11
12
+
clanCore.secrets."lassul.us-dkim" = {
13
+
secrets."lassul.us.dkim.priv" = { };
14
+
facts."lassul.us.dkim.pub" = { };
15
+
generator.path = with pkgs; [ coreutils openssl ];
16
+
generator.script = ''
17
+
openssl genrsa -out "$secrets"/lassul.us.dkim.priv 2048
18
+
openssl rsa -in "$secrets"/lassul.us.dkim.priv -pubout -outform der 2>/dev/null | openssl base64 -A > "$facts"/lassul.us.dkim.pub
19
+
'';
20
+
};
21
+
12
22
krebs.exim-smarthost = {
13
23
enable = true;
14
24
primary_hostname = "lassul.us";
+1
machines/neoprism/facts/lassul.us.dkim.pub
+1
machines/neoprism/facts/lassul.us.dkim.pub
···
1
+
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUv3DMndFellqu208feABEzT/PskOfTSdJCOF/HELBR0PHnbBeRoeHEm9XAcOe/Mz2t/ysgZ6JFXeFxCtoM5fG20brUMRzsVRxb9Ur5cEvOYuuRrbChYcKa+fopu8pYrlrqXD3miHISoy6ErukIYCRpXWUJHi1TlNQhLWFYqAaywIDAQAB
+1
machines/neoprism/facts/nix-serve.pub
+1
machines/neoprism/facts/nix-serve.pub
···
1
+
cache.prism-2:YwmCm3/s/D+SxrPKN/ETjlpw/219pNUbpnluatp6FKI=