rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-26 00:18:28 +02:00
Code Issues Projects Releases Packages Wiki Activity

enable rspamd

Browse source
This commit is contained in:
Rouven Seifert 2023-05-24 17:08:44 +02:00
parent ff990ac5ba
commit d031f5e5b3
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
4 changed files with 16 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/falkenstein-1/default.nix
View file

@ -51,7 +51,7 @@
# Enable the OpenSSH daemon.
services.openssh = {
enable = true;
passwordAuthentication = false;
settings.PasswordAuthentication = false;
};
users.users.root.openssh.authorizedKeys.keyFiles = [
#../../keys/ssh/rouven-thinkpad

11
hosts/falkenstein-1/modules/mail/default.nix
View file

@ -1,6 +1,7 @@
{ config, ... }:
{
sops.secrets."mail/rouven".owner = config.users.users.postfix.name;
sops.secrets."rspamd".owner = config.users.users.rspamd.name;
mailserver = rec {
enable = true;
fqdn = "mail.rfive.de";
@ -14,4 +15,14 @@
};
certificateScheme = 3;
};
services.rspamd.locals."worker-controller.inc".source = config.sops.secrets."rspamd".path;
services.nginx.virtualHosts."rspamd.rfive.de" = {
enableACME = true;
forceSSL = true;
locations = {
"/" = {
proxyPass = "http://unix:/run/rspamd/worker-controller.sock:/";
};
};
};
}