certs not fully working yet

This commit is contained in:
twoneis 2025-02-09 17:22:54 +01:00
parent cd8658c042
commit 66a4bef740

View file

@ -16,25 +16,6 @@ in mkIf conf.mail.enable {
locations."/".proxyPass = "http://localhost:8080"; locations."/".proxyPass = "http://localhost:8080";
}; };
}; };
streamConfig = ''
server {
listen 25 proxy_protocol;
proxy_pass 127.0.0.1:10025;
proxy_protocol on;
}
server {
listen 993 proxy_protocol;
proxy_pass 127.0.0.1:10993;
proxy_protocol on;
}
server {
listen 465 proxy_protocol;
proxy_pass 127.0.0.1:10465;
proxy_protocol on;
}
'';
}; };
services.stalwart-mail = { services.stalwart-mail = {
@ -53,15 +34,15 @@ in mkIf conf.mail.enable {
listener = { listener = {
smtp = { smtp = {
protocol = "smtp"; protocol = "smtp";
bind = "[::]:10025"; bind = "[::]:25";
}; };
submissions = { submissions = {
protocol = "smtp"; protocol = "smtp";
bind = "[::]:10465"; bind = "[::]:465";
}; };
imaps = { imaps = {
protocol = "imap"; protocol = "imap";
bind = "[::]:10993"; bind = "[::]:993";
}; };
jmap = { jmap = {
protocol = "jmap"; protocol = "jmap";
@ -79,8 +60,8 @@ in mkIf conf.mail.enable {
domain = "chpu.eu"; domain = "chpu.eu";
}; };
certificate.default = { certificate.default = {
cert = "%{file:/var/lib/acme/chpu.eu/cert.pem}%"; cert = "%{file:/var/lib/acme/chpu.eu/chain.pem}%";
private-key = "%{file:/var/lib/acme/chpu.eu/key.pem}"; private-key = "%{file:/var/lib/acme/chpu.eu/key.pem}%";
}; };
session.auth = { session.auth = {
mechanism = "[plain]"; mechanism = "[plain]";
@ -94,16 +75,16 @@ in mkIf conf.mail.enable {
type = "memory"; type = "memory";
principals = [ principals = [
{ {
class = "individual"; type = "individual";
name = "mira@chpu.eu"; name = "mira@chpu.eu";
secret = "%{file:/root/email-mira-passwd}%"; secret = "%{file:/root/stalwart/secret/mira}%";
email = [ "mira@chpu.eu" ]; email = [ "mira@chpu.eu" ];
} }
]; ];
}; };
authentication.fallback-admin = { authentication.fallback-admin = {
user = "admin"; user = "admin";
secret = "%{file:/root/stalwart-admin-passwd}%"; secret = "%{file:/root/stalwart/secret/admin}%";
}; };
}; };
}; };