modules/mail.nix

@@ -0,0 +1,69 @@
+{ config, pkgs, ... }:
+    let hostname  = "mail.test.stramke.com";
+    in {
+        networking.firewall.allowedTCPPorts = [ 25 587 143];
+        services = {
+            postfix = {
+                enable = true; 
+                hostname = "${hostname}";
+                config = {
+                    myorigin = "mail.test.stramke.com";
+                    mydestination = "127.0.0.1";
+                    smtpd_recipient_restrictions = [
+                               "reject_unauth_destination"
+                               "permit_sasl_authenticated"
+
+                             ];
+                    smtpd_sasl_auth_enable = true;
+                    smtpd_sasl_path = "/var/lib/postfix/auth";
+                    smtpd_sasl_type = "dovecot";
+                    smtpd_relay_restrictions = [
+                               "reject_unauth_destination"
+                               # "relay_domains = "${hostname}"
+                               "permit_sasl_authenticated"
+                             ];
+                };
+            };
+            dovecot2 = {
+                enable = true;
+                enableImap = true;
+                enableQuota = false;
+                mailboxes = {
+                        Spam = {
+                          auto = "create";
+                          specialUse = "Junk";
+                        };
+                        Sent = {
+                          auto = "create";
+                          specialUse = "Sent";
+                        };
+                        Drafts = {
+                          auto = "create";
+                          specialUse = "Drafts";
+                        };
+                        Trash = {
+                          auto = "create";
+                          specialUse = "Trash";
+                        };
+                      };
+                extraConfig = ''
+                    mail_location = mbox:~/mail:INBOX=/var/mail/%u
+                    # auth_mechanisms = plain login
+                    # disable_plaintext_auth = no
+                    userdb {
+                        driver = passwd
+                        args = blocking=no
+                    }
+                    service auth {
+                         unix_listener /var/lib/postfix/auth {
+                           group = postfix
+                           mode = 0660
+                           user = postfix
+                        }
+                        user = dovecot2
+                    }
+                '';
+            };
+        };
+    }
+