osbm/flake
1
0
Fork 0
Code Issues Pull requests Wiki Activity

folders

Browse source
This commit is contained in:
Osman Faruk Bayram 2025-11-05 20:18:51 +03:00
parent bbae79fd0d
commit a80eeb2a16
1 changed files with 38 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

71
modules/nixos/services/mailserver.nix
View file

@ -41,42 +41,47 @@
{
environment.persistence."/persist" = {
directories = [
# TODO write justifications for each of these
# Dovecot is an open source IMAP and POP3 server
# which means it handles email retrieval for users.
"/var/lib/dovecot" # owned by root
# "/var/lib/postfix" # owned by root
# {
# directory = "/var/lib/rspamd";
# user = "rspamd";
# group = "rspamd";
# mode = "0750";
# }
# {
# directory = "/var/spool/redis-rspamd";
# user = "redis-rspamd";
# group = "redis-rspamd";
# mode = "0750";
# }
# {
# directory = config.mailserver.sieveDirectory;
# user = "virtualMail";
# group = "virtualMail";
# mode = "0770";
# }
# {
# directory = config.mailserver.mailDirectory;
# user = config.mailserver.vmailUserName;
# group = config.mailserver.vmailGroupName;
# mode = "0700";
# }
# {
# directory = config.mailserver.dkimKeyDirectory;
# user = "rspamd";
# group = "rspamd";
# mode = "0755";
# }
# "/var/spool"
# Postfix is a open-source mail transfer agent (MTA)
"/var/lib/postfix" # owned by root
# Rspamd is a open-source spam filtering system.
{
directory = "/var/lib/rspamd";
user = "rspamd";
group = "rspamd";
mode = "0700";
}
# redis-rspamd is just a redis instance used by rspamd for caching
# TODO: what is the /var/spool folder?
{
directory = "/var/spool/redis-rspamd";
user = "redis-rspamd";
group = "redis-rspamd";
mode = "0750";
}
# Sieve is a scripting language for filtering email messages.
{
directory = config.mailserver.sieveDirectory; # /var/sieve by default
user = "virtualMail";
group = "virtualMail";
mode = "0770";
}
# Mail folder
{
directory = config.mailserver.mailDirectory; # /var/vmail by default
user = config.mailserver.vmailUserName;
group = config.mailserver.vmailGroupName;
mode = "0700";
}
# DKIM is used to sign outgoing emails to verify they are from the claimed domain.
{
directory = config.mailserver.dkimKeyDirectory; # /var/dkim by default
user = "rspamd";
group = "rspamd";
mode = "0755";
}
];
};
})