bogale/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

network-watchdog, dovecot

Browse source
This commit is contained in:
bogale 2026-09-21 03:22:17 +09:00
commit 5894fa9aa5
3 changed files with 55 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

56
server/configuration.nix
View file

@ -21,7 +21,7 @@
wifi-security.psk = "$BOGALE_2_4_PSK";
};
firewall = {
allowedTCPPorts = [ 25 80 443 ];
allowedTCPPorts = [ 25 80 443 993 ];
allowedUDPPorts = [ 443 ];
};
};
@ -30,10 +30,37 @@
certs."bogaledev.ru" = {
validMinDays = 3;
dnsProvider = "cloudflare";
email = "acme-tls@bogaledev.ru";
reloadServices = [ "nginx.service" ];
email = "letsencrypt@bogaledev.ru";
extraDomainNames = [ "*.bogaledev.ru" ];
credentialFiles = { "CF_DNS_API_TOKEN_FILE" = "/root/secrets/cf-token"; };
reloadServices = [ "nginx.service" "dovecot.service" "postfix.service" ];
credentialFiles = { "CF_DNS_API_TOKEN_FILE" = "/secrets/cf-token"; };
};
};
systemd = {
services.network-watchdog = {
path = [ pkgs.iputils ];
serviceConfig.Type = "oneshot";
script = ''
if [ ! -e /run/network.failures ] || ping -c 1 -W 3 1.1.1.1 &> /dev/null; then
failures=0
else
failures=$(($(cat /run/network.failures)+1))
if [ $failures -ge 3 ]; then
systemctl restart NetworkManager
failures=0
fi
fi
echo $failures > /run/network.failures
'';
};
timers.network-watchdog = {
wantedBy = [ "timers.target" ];
timerConfig = {
OnBootSec = 5;
AccuracySec = 1;
OnUnitActiveSec = 5;
Unit = "network-watchdog.service";
};
};
};
services = {
@ -58,16 +85,27 @@
dovecot2 = {
enable = true;
settings = {
mail_uid = ;
mail_gid = ;
mail_path = "~";
ssl = "required";
mail_gid = "vmail";
mail_uid = "vmail";
protocols.imap = true;
mail_driver = "maildir";
mail_home = "/var/mail/vmail";
auth_mechanisms = [ "plain" ];
dovecot_config_version = "2.4.5";
dovecot_storage_version = "2.4.5";
ssl_server_key_file = "/var/lib/acme/bogaledev.ru/key.pem";
ssl_server_cert_file = "/var/lib/acme/bogaledev.ru/fullchain.pem";
"passdb passwd-file".passwd_file_path = "/secrets/dovecot-passwd";
};
};
postfix = {
enable = true;
#enableSubmission = true;
virtualMapType = "regexp";
virtual = ''/.*@bogaledev.ru/ main@bogaledev.ru'';
mapFiles.mailbox = pkgs.writeText "mailbox" ''main@bogaledev.ru bogaledev.ru/'';
virtual = ''/.*@bogaledev.ru/ mail@bogaledev.ru'';
mapFiles.mailbox = pkgs.writeText "mailbox" ''mail@bogaledev.ru /'';
settings.main = {
virtual_uid_maps = "static:1819";
virtual_gid_maps = "static:1819";
@ -89,7 +127,7 @@
configurePostgres = true;
domain = "vw.bogaledev.ru";
package = pkgs.vaultwarden-postgresql;
environmentFile = "/root/secrets/vaultwarden.env";
environmentFile = "/secrets/vaultwarden.env";
config = {
#EMAIL_TOKEN_SIZE = 8;
#SMTP_SECURITY = "off";