misc_nixos-mailserver/mail-server/rmilter.nix

77 lines
1.9 KiB
Nix
Raw Normal View History

2017-08-12 16:27:22 +00:00
# nixos-mailserver: a simple mail server
2018-01-29 09:34:27 +00:00
# Copyright (C) 2016-2018 Robin Raymond
2017-08-12 16:27:22 +00:00
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>
2017-09-03 09:13:34 +00:00
{ config, pkgs, lib, ... }:
2017-08-12 16:27:22 +00:00
let
2017-09-03 09:13:34 +00:00
cfg = config.mailserver;
clamav = if cfg.virusScanning
2017-08-12 16:27:22 +00:00
then
''
clamav {
2017-08-13 19:51:07 +00:00
servers = /var/run/clamav/clamd.ctl;
2017-08-12 16:27:22 +00:00
};
''
else "";
2017-09-03 09:13:34 +00:00
dkim = if cfg.dkimSigning
2017-11-11 15:05:49 +00:00
# Note: domain = "*"; causes Rmilter to try to search key in the key path
# as keypath/domain.selector.key for any domain.
2017-08-12 16:27:22 +00:00
then
''
dkim {
domain {
2017-09-03 09:13:34 +00:00
key = "${cfg.dkimKeyDirectory}";
2017-08-23 15:22:44 +00:00
domain = "*";
2017-09-03 09:13:34 +00:00
selector = "${cfg.dkimSelector}";
2017-08-12 16:27:22 +00:00
};
sign_alg = sha256;
auth_only = yes;
}
''
else "";
in
{
2017-09-03 09:13:34 +00:00
config = with cfg; lib.mkIf enable {
services.rspamd = {
enable = true;
};
2018-01-29 09:24:53 +00:00
services.unbound.enable = true;
networking.nameservers = [ "127.0.0.1" ];
2017-09-03 09:15:01 +00:00
services.rmilter = {
2017-11-13 21:46:59 +00:00
inherit debug;
2017-09-03 09:15:01 +00:00
enable = true;
postfix.enable = true;
rspamd = {
enable = true;
extraConfig = "extended_spam_headers = yes;";
};
2017-09-03 09:15:01 +00:00
extraConfig =
''
use_redis = true;
max_size = 20M;
2017-09-03 09:15:01 +00:00
${clamav}
2017-08-12 16:27:22 +00:00
2017-09-03 09:15:01 +00:00
${dkim}
'';
};
2017-09-03 09:13:34 +00:00
};
2017-08-12 16:27:22 +00:00
}