Skynet/misc_nixos-mailserver
7
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

certificate scheme 2

Browse source 
On the fly create certificates via openssl (Maybe change this to
libressl in the future?). This is probably the best scheme to get
something that simply works. Self signed certificates only pose a
problem when connecting to retrieve the email via imap or pop3.
This commit is contained in:
Robin Raymond 2017-08-13 11:51:07 +02:00
parent be5d8c09d8
commit b68e64ec72
6 changed files with 70 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

21
mail-server/services.nix
View file

@ -16,8 +16,23 @@
{ mail_dir, vmail_user_name, vmail_group_name, valiases, domain, enable_imap,
enable_pop3, virus_scanning, dkim_signing, certificate_scheme, cert_file,
key_file }:
key_file, cert_dir }:
let
# cert :: PATH
cert = if certificate_scheme == 1
then cert_file
else if certificate_scheme == 2
then "${cert_dir}/cert-${domain}.pem"
else "";
# key :: PATH
key = if certificate_scheme == 1
then key_file
else if certificate_scheme == 2
then "${cert_dir}/key-${domain}.pem"
else "";
in
{
# rspamd
rspamd = {
@ -29,11 +44,11 @@ key_file }:
};
postfix = import ./postfix.nix {
inherit mail_dir domain valiases certificate_scheme cert_file key_file;
inherit mail_dir domain valiases cert key;
};
dovecot2 = import ./dovecot.nix {
inherit vmail_group_name vmail_user_name mail_dir enable_imap
enable_pop3 certificate_scheme cert_file key_file;
enable_pop3 cert key;
};
}