firewall respects settings

This commit is contained in:
Robin Raymond 2017-08-13 14:20:02 +02:00
parent 72f45af1ca
commit ecd73f4e1c

View file

@ -14,13 +14,15 @@
# You should have received a copy of the GNU General Public License # You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/> # along with this program. If not, see <http://www.gnu.org/licenses/>
{ domain, host_prefix }: { domain, host_prefix, enable_imap, enable_pop3 }:
{ {
hostName = "${host_prefix}.${domain}"; hostName = "${host_prefix}.${domain}";
firewall = { firewall = {
enable = true; enable = true;
allowedTCPPorts = [ 25 143 587 ]; # < TODO: make this flexible allowedTCPPorts = [ 25 587 ]
++ (if enable_imap then [ 143 ] else [])
++ (if enable_pop3 then [ 110 ] else []);
}; };
} }