refactor networking domain

hosts/falkenstein-1/modules/mail/default.nix

@@ -1,8 +1,8 @@
 { config, pkgs, ... }:
 
 let
-  domain = "rfive.de";
-  hostname = "falkenstein.vpn.${domain}";
+  domain = config.networking.domain;
+  hostname = "mail.${domain}";
   # see https://www.kuketz-blog.de/e-mail-anbieter-ip-stripping-aus-datenschutzgruenden/
   header_cleanup = pkgs.writeText "header_cleanup_outgoing" ''
     /^\s*(Received: from)[^\n]*(.*)/ REPLACE $1 127.0.0.1 (localhost [127.0.0.1])$2
@@ -67,13 +67,9 @@ in
       networks = [ "127.0.0.1" "141.30.30.169" ];
       sslCert = "/var/lib/acme/${hostname}/fullchain.pem";
       sslKey = "/var/lib/acme/${hostname}/key.pem";
-
-      extraAliases = ''
-        postmaster:     root
-        abuse:          postmaster
-      '';
       config = {
         home_mailbox = "Maildir/";
+        smtp_helo_name = "falkenstein.vpn.rfive.de";
         smtp_use_tls = true;
         smtpd_use_tls = true;
         smtpd_tls_protocols = [
@@ -100,6 +96,7 @@ in
           "reject_unauth_destination"
         ];
         smtp_header_checks = "pcre:${header_cleanup}";
+
         alias_maps = [ "hash:/etc/aliases" ];
         smtpd_milters = [ "local:/run/opendkim/opendkim.sock" ];
         non_smtpd_milters = [ "local:/var/run/opendkim/opendkim.sock" ];
@@ -272,9 +269,9 @@ in
           reporting {
             # Required attributes
             enabled = true; # Enable reports in general
-            email = 'reports@rfive.de'; # Source of DMARC reports
-            domain = 'rfive.de'; # Domain to serve
-            org_name = 'rfive.de'; # Organisation
+            email = 'reports@${config.networking.domain}'; # Source of DMARC reports
+            domain = '${config.networking.domain}'; # Domain to serve
+            org_name = '${config.networking.domain}'; # Organisation
             from_name = 'DMARC Aggregate Report';
           }
         '';
@@ -300,7 +297,7 @@ in
       enableACME = true;
       forceSSL = true;
     };
-    "rspamd.rfive.de" = {
+    "rspamd.${config.networking.domain}" = {
       enableACME = true;
       forceSSL = true;
       locations = {

hosts/falkenstein-1/modules/networks/default.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, lib, ... }:
 {
   sops.secrets = {
     "wireguard/dorm/private" = {
@@ -10,6 +10,7 @@
   };
   networking = {
     hostName = "falkenstein-1";
+    domain = "rfive.de";
     useNetworkd = true;
     enableIPv6 = true;
   };

hosts/falkenstein-1/modules/nginx/default.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 {
   networking.firewall.allowedTCPPorts = [ 80 443 ];
   services.nginx = {
@@ -8,16 +8,16 @@
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
 
-    virtualHosts."rfive.de" = {
+    virtualHosts."${config.networking.domain}" = {
       enableACME = true;
       forceSSL = true;
-      root = "/srv/web/rfive.de";
+      root = "/srv/web/${config.networking.domain}";
     };
   };
   security.acme = {
     acceptTerms = true;
     defaults = {
-      email = "rouven@rfive.de";
+      email = "rouven@${config.networking.domain}";
     };
   };
 }

hosts/falkenstein-1/modules/purge/default.nix

@@ -1,6 +1,6 @@
 { config, ... }:
 let
-  domain = "purge.rfive.de";
+  domain = "purge.${config.networking.domain}";
 in
 {
   sops.secrets."purge/token".owner = "purge";

hosts/falkenstein-1/modules/trucksimulatorbot/default.nix

@@ -1,6 +1,6 @@
 { config, pkgs, trucksimulatorbot, ... }:
 let
-  domain = "trucksimulatorbot.rfive.de";
+  domain = "trucksimulatorbot.${config.networking.domain}";
 in
 {
   services.trucksimulatorbot = {