···

       
7
       
 
       
  rspamdCfg = config.services.rspamd;

     

       
8
       
 
       
  cfg = config.services.rmilter;

     

       
9
       
 
       


     

       
10
       
-
       
  inetSockets = map (sock: let s = stringSplit ":" sock; in "inet:${last s}:${head s}") cfg.bindInetSockets;

     

       
11
       
 
       
  unixSockets = map (sock: "unix:${sock}") cfg.bindUnixSockets;

     

       
12
       
 
       


     

       
13
       
 
       
  allSockets = unixSockets ++ inetSockets;

     

       
14
       
 
       


     

       
15
       
 
       
  rmilterConf = ''

     

       
16
       
-
       
pidfile = /run/rmilter/rmilter.pid;

     

       
17
       
-
       
bind_socket = ${if cfg.socketActivation then "fd:3" else concatStringsSep ", " allSockets};

     

       
18
       
-
       
tempdir = /tmp;

     

       
19
       
-
       


     

       
20
       
 
       
  '' + (with cfg.rspamd; if enable then ''

     

       
21
       
-
       
spamd {

     

       
22
       
-
       
        servers = ${concatStringsSep ", " servers};

     

       
23
       
-
       
        connect_timeout = 1s;

     

       
24
       
-
       
        results_timeout = 20s;

     

       
25
       
-
       
        error_time = 10;

     

       
26
       
-
       
        dead_time = 300;

     

       
27
       
-
       
        maxerrors = 10;

     

       
28
       
-
       
        reject_message = "${rejectMessage}";

     

       
29
       
-
       
        ${optionalString (length whitelist != 0)  "whitelist = ${concatStringsSep ", " whitelist};"}

     

       
30
       
 
       


     

       
31
       
-
       
        # rspamd_metric - metric for using with rspamd

     

       
32
       
-
       
        # Default: "default"

     

       
33
       
-
       
        rspamd_metric = "default";

     

       
34
       
-
       
        ${extraConfig}

     

       
35
       
-
       
};

     

       
36
       
 
       
    '' else "") + cfg.extraConfig;

     

       
37
       
 
       


     

       
38
       
 
       
  rmilterConfigFile = pkgs.writeText "rmilter.conf" rmilterConf;

     
···

       
100
       
 
       
        default = true;

     

       
101
       
 
       
        description = ''

     

       
102
       
 
       
          Enable systemd socket activation for rmilter.

     

       
103
       
-
       
          (disabling socket activation not recommended

     

       
104
       
-
       
          when unix socket used, and follow to wrong

     

       
105
       
-
       
          permissions on unix domain socket.)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
106
       
 
       
        '';

     

       
107
       
 
       
      };

     

       
108
       
 
       


     

···

       
7
       
 
       
  rspamdCfg = config.services.rspamd;

     

       
8
       
 
       
  cfg = config.services.rmilter;

     

       
9
       
 
       


     

       
10
       
+
       
  inetSockets = map (sock: let s = splitString ":" sock; in "inet:${last s}@${head s}") cfg.bindInetSockets;

     

       
11
       
 
       
  unixSockets = map (sock: "unix:${sock}") cfg.bindUnixSockets;

     

       
12
       
 
       


     

       
13
       
 
       
  allSockets = unixSockets ++ inetSockets;

     

       
14
       
 
       


     

       
15
       
 
       
  rmilterConf = ''

     

       
16
       
+
       
    pidfile = /run/rmilter/rmilter.pid;

     

       
17
       
+
       
    bind_socket = ${if cfg.socketActivation then "fd:3" else last inetSockets};

     

       
18
       
+
       
    tempdir = /tmp;

     

       
0
       
 
       

     

       
19
       
 
       
  '' + (with cfg.rspamd; if enable then ''

     

       
20
       
+
       
    spamd {

     

       
21
       
+
       
      servers = ${concatStringsSep ", " servers};

     

       
22
       
+
       
      connect_timeout = 1s;

     

       
23
       
+
       
      results_timeout = 20s;

     

       
24
       
+
       
      error_time = 10;

     

       
25
       
+
       
      dead_time = 300;

     

       
26
       
+
       
      maxerrors = 10;

     

       
27
       
+
       
      reject_message = "${rejectMessage}";

     

       
28
       
+
       
      ${optionalString (length whitelist != 0)  "whitelist = ${concatStringsSep ", " whitelist};"}

     

       
29
       
 
       


     

       
30
       
+
       
      # rspamd_metric - metric for using with rspamd

     

       
31
       
+
       
      # Default: "default"

     

       
32
       
+
       
      rspamd_metric = "default";

     

       
33
       
+
       
      ${extraConfig}

     

       
34
       
+
       
    };

     

       
35
       
 
       
    '' else "") + cfg.extraConfig;

     

       
36
       
 
       


     

       
37
       
 
       
  rmilterConfigFile = pkgs.writeText "rmilter.conf" rmilterConf;

     
···

       
99
       
 
       
        default = true;

     

       
100
       
 
       
        description = ''

     

       
101
       
 
       
          Enable systemd socket activation for rmilter.

     

       
102
       
+
       


     

       
103
       
+
       
          Disabling socket activation is not recommended when a Unix

     

       
104
       
+
       
          domain socket is used and could lead to incorrect

     

       
105
       
+
       
          permissions.  Therefore, setting this to false will

     

       
106
       
+
       
          configure rmilter to use an inet socket only.

     

       
107
       
 
       
        '';

     

       
108
       
 
       
      };

     

       
109