commit 8d90446d39dba6ce3f1f15af5430a4e2ce368f16 · pyrox.dev/nixpkgs

nixos/modules/module-list.nix

···

       660
       660
        
         ./services/logging/ulogd.nix

     

       661
       661
        
         ./services/mail/automx2.nix

     

       662
       662
        
         ./services/mail/clamsmtp.nix

     

       663
       663
       +
         ./services/mail/cyrus-imap.nix

     

       663
       664
        
         ./services/mail/davmail.nix

     

       664
       665
        
         ./services/mail/dkimproxy-out.nix

     

       665
       666
        
         ./services/mail/dovecot.nix

+379

nixos/modules/services/mail/cyrus-imap.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         config,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }:

     

       7
       7
       +
       let

     

       8
       8
       +
         cfg = config.services.cyrus-imap;

     

       9
       9
       +
         cyrus-imapdPkg = pkgs.cyrus-imapd;

     

       10
       10
       +
         inherit (lib)

     

       11
       11
       +
           mkEnableOption

     

       12
       12
       +
           mkIf

     

       13
       13
       +
           mkOption

     

       14
       14
       +
           optionalAttrs

     

       15
       15
       +
           optionalString

     

       16
       16
       +
           generators

     

       17
       17
       +
           mapAttrsToList

     

       18
       18
       +
           ;

     

       19
       19
       +
         inherit (lib.strings) concatStringsSep;

     

       20
       20
       +
         inherit (lib.types)

     

       21
       21
       +
           attrsOf

     

       22
       22
       +
           submodule

     

       23
       23
       +
           listOf

     

       24
       24
       +
           oneOf

     

       25
       25
       +
           str

     

       26
       26
       +
           int

     

       27
       27
       +
           bool

     

       28
       28
       +
           nullOr

     

       29
       29
       +
           path

     

       30
       30
       +
           ;

     

       31
       31
       +
       

     

       32
       32
       +
         mkCyrusConfig =

     

       33
       33
       +
           settings:

     

       34
       34
       +
           let

     

       35
       35
       +
             mkCyrusOptionsList =

     

       36
       36
       +
               v:

     

       37
       37
       +
               mapAttrsToList (

     

       38
       38
       +
                 p: q:

     

       39
       39
       +
                 if (q != null) then

     

       40
       40
       +
                   if builtins.isInt q then

     

       41
       41
       +
                     "${p}=${builtins.toString q}"

     

       42
       42
       +
                   else

     

       43
       43
       +
                     "${p}=\"${if builtins.isList q then (concatStringsSep " " q) else q}\""

     

       44
       44
       +
                 else

     

       45
       45
       +
                   ""

     

       46
       46
       +
               ) v;

     

       47
       47
       +
             mkCyrusOptionsString = v: concatStringsSep " " (mkCyrusOptionsList v);

     

       48
       48
       +
           in

     

       49
       49
       +
           concatStringsSep "\n  " (mapAttrsToList (n: v: n + " " + (mkCyrusOptionsString v)) settings);

     

       50
       50
       +
       

     

       51
       51
       +
         cyrusConfig = lib.concatStringsSep "\n" (

     

       52
       52
       +
           lib.mapAttrsToList (n: v: ''

     

       53
       53
       +
             ${n} {

     

       54
       54
       +
               ${mkCyrusConfig v}

     

       55
       55
       +
             }

     

       56
       56
       +
           '') cfg.cyrusSettings

     

       57
       57
       +
         );

     

       58
       58
       +
       

     

       59
       59
       +
         imapdConfig =

     

       60
       60
       +
           with generators;

     

       61
       61
       +
           toKeyValue {

     

       62
       62
       +
             mkKeyValue = mkKeyValueDefault {

     

       63
       63
       +
               mkValueString =

     

       64
       64
       +
                 v:

     

       65
       65
       +
                 if builtins.isBool v then

     

       66
       66
       +
                   if v then "yes" else "no"

     

       67
       67
       +
                 else if builtins.isList v then

     

       68
       68
       +
                   concatStringsSep " " v

     

       69
       69
       +
                 else

     

       70
       70
       +
                   mkValueStringDefault { } v;

     

       71
       71
       +
             } ": ";

     

       72
       72
       +
           } cfg.imapdSettings;

     

       73
       73
       +
       in

     

       74
       74
       +
       {

     

       75
       75
       +
         options.services.cyrus-imap = {

     

       76
       76
       +
           enable = mkEnableOption "Cyrus IMAP, an email, contacts and calendar server";

     

       77
       77
       +
           debug = mkEnableOption "debugging messages for the Cyrus master process";

     

       78
       78
       +
       

     

       79
       79
       +
           listenQueue = mkOption {

     

       80
       80
       +
             type = int;

     

       81
       81
       +
             default = 32;

     

       82
       82
       +
             description = ''

     

       83
       83
       +
               Socket listen queue backlog size. See listen(2) for more information about a backlog.

     

       84
       84
       +
               Default is 32, which may be increased if you have a very high connection rate.

     

       85
       85
       +
             '';

     

       86
       86
       +
           };

     

       87
       87
       +
           tmpDBDir = mkOption {

     

       88
       88
       +
             type = path;

     

       89
       89
       +
             default = "/run/cyrus/db";

     

       90
       90
       +
             description = ''

     

       91
       91
       +
               Location where DB files are stored.

     

       92
       92
       +
               Databases in this directory are recreated upon startup, so ideally they should live in ephemeral storage for best performance.

     

       93
       93
       +
             '';

     

       94
       94
       +
           };

     

       95
       95
       +
           cyrusSettings = mkOption {

     

       96
       96
       +
             type = submodule {

     

       97
       97
       +
               freeformType = attrsOf (

     

       98
       98
       +
                 attrsOf (oneOf [

     

       99
       99
       +
                   bool

     

       100
       100
       +
                   int

     

       101
       101
       +
                   (listOf str)

     

       102
       102
       +
                 ])

     

       103
       103
       +
               );

     

       104
       104
       +
               options = {

     

       105
       105
       +
                 START = mkOption {

     

       106
       106
       +
                   default = {

     

       107
       107
       +
                     recover = {

     

       108
       108
       +
                       cmd = [

     

       109
       109
       +
                         "ctl_cyrusdb"

     

       110
       110
       +
                         "-r"

     

       111
       111
       +
                       ];

     

       112
       112
       +
                     };

     

       113
       113
       +
                   };

     

       114
       114
       +
                   description = ''

     

       115
       115
       +
                     This section lists the processes to run before any SERVICES are spawned.

     

       116
       116
       +
                     This section is typically used to initialize databases.

     

       117
       117
       +
                     Master itself will not startup until all tasks in START have completed, so put no blocking commands here.

     

       118
       118
       +
                   '';

     

       119
       119
       +
                 };

     

       120
       120
       +
                 SERVICES = mkOption {

     

       121
       121
       +
                   default = {

     

       122
       122
       +
                     imap = {

     

       123
       123
       +
                       cmd = [ "imapd" ];

     

       124
       124
       +
                       listen = "imap";

     

       125
       125
       +
                       prefork = 0;

     

       126
       126
       +
                     };

     

       127
       127
       +
                     pop3 = {

     

       128
       128
       +
                       cmd = [ "pop3d" ];

     

       129
       129
       +
                       listen = "pop3";

     

       130
       130
       +
                       prefork = 0;

     

       131
       131
       +
                     };

     

       132
       132
       +
                     lmtpunix = {

     

       133
       133
       +
                       cmd = [ "lmtpd" ];

     

       134
       134
       +
                       listen = "/run/cyrus/lmtp";

     

       135
       135
       +
                       prefork = 0;

     

       136
       136
       +
                     };

     

       137
       137
       +
                     notify = {

     

       138
       138
       +
                       cmd = [ "notifyd" ];

     

       139
       139
       +
                       listen = "/run/cyrus/notify";

     

       140
       140
       +
                       proto = "udp";

     

       141
       141
       +
                       prefork = 0;

     

       142
       142
       +
                     };

     

       143
       143
       +
                   };

     

       144
       144
       +
                   description = ''

     

       145
       145
       +
                     This section is the heart of the cyrus.conf file. It lists the processes that should be spawned to handle client connections made on certain Internet/UNIX sockets.

     

       146
       146
       +
                   '';

     

       147
       147
       +
                 };

     

       148
       148
       +
                 EVENTS = mkOption {

     

       149
       149
       +
                   default = {

     

       150
       150
       +
                     tlsprune = {

     

       151
       151
       +
                       cmd = [ "tls_prune" ];

     

       152
       152
       +
                       at = 400;

     

       153
       153
       +
                     };

     

       154
       154
       +
                     delprune = {

     

       155
       155
       +
                       cmd = [

     

       156
       156
       +
                         "cyr_expire"

     

       157
       157
       +
                         "-E"

     

       158
       158
       +
                         "3"

     

       159
       159
       +
                       ];

     

       160
       160
       +
                       at = 400;

     

       161
       161
       +
                     };

     

       162
       162
       +
                     deleteprune = {

     

       163
       163
       +
                       cmd = [

     

       164
       164
       +
                         "cyr_expire"

     

       165
       165
       +
                         "-E"

     

       166
       166
       +
                         "4"

     

       167
       167
       +
                         "-D"

     

       168
       168
       +
                         "28"

     

       169
       169
       +
                       ];

     

       170
       170
       +
                       at = 430;

     

       171
       171
       +
                     };

     

       172
       172
       +
                     expungeprune = {

     

       173
       173
       +
                       cmd = [

     

       174
       174
       +
                         "cyr_expire"

     

       175
       175
       +
                         "-E"

     

       176
       176
       +
                         "4"

     

       177
       177
       +
                         "-X"

     

       178
       178
       +
                         "28"

     

       179
       179
       +
                       ];

     

       180
       180
       +
                       at = 445;

     

       181
       181
       +
                     };

     

       182
       182
       +
                     checkpoint = {

     

       183
       183
       +
                       cmd = [

     

       184
       184
       +
                         "ctl_cyrusdb"

     

       185
       185
       +
                         "-c"

     

       186
       186
       +
                       ];

     

       187
       187
       +
                       period = 30;

     

       188
       188
       +
                     };

     

       189
       189
       +
                   };

     

       190
       190
       +
                   description = ''

     

       191
       191
       +
                     This section lists processes that should be run at specific intervals, similar to cron jobs. This section is typically used to perform scheduled cleanup/maintenance.

     

       192
       192
       +
                   '';

     

       193
       193
       +
                 };

     

       194
       194
       +
                 DAEMON = mkOption {

     

       195
       195
       +
                   default = { };

     

       196
       196
       +
                   description = ''

     

       197
       197
       +
                     This section lists long running daemons to start before any SERVICES are spawned. master(8) will ensure that these processes are running, restarting any process which dies or forks. All listed processes will be shutdown when master(8) is exiting.

     

       198
       198
       +
                   '';

     

       199
       199
       +
                 };

     

       200
       200
       +
               };

     

       201
       201
       +
             };

     

       202
       202
       +
             description = "Cyrus configuration settings. See [cyrus.conf(5)](https://www.cyrusimap.org/imap/reference/manpages/configs/cyrus.conf.html)";

     

       203
       203
       +
           };

     

       204
       204
       +
           imapdSettings = mkOption {

     

       205
       205
       +
             type = submodule {

     

       206
       206
       +
               freeformType = attrsOf (oneOf [

     

       207
       207
       +
                 str

     

       208
       208
       +
                 int

     

       209
       209
       +
                 bool

     

       210
       210
       +
                 (listOf str)

     

       211
       211
       +
               ]);

     

       212
       212
       +
               options = {

     

       213
       213
       +
                 configdirectory = mkOption {

     

       214
       214
       +
                   type = path;

     

       215
       215
       +
                   default = "/var/lib/cyrus";

     

       216
       216
       +
                   description = ''

     

       217
       217
       +
                     The pathname of the IMAP configuration directory.

     

       218
       218
       +
                   '';

     

       219
       219
       +
                 };

     

       220
       220
       +
                 lmtpsocket = mkOption {

     

       221
       221
       +
                   type = path;

     

       222
       222
       +
                   default = "/run/cyrus/lmtp";

     

       223
       223
       +
                   description = ''

     

       224
       224
       +
                     Unix socket that lmtpd listens on, used by deliver(8). This should match the path specified in cyrus.conf(5).

     

       225
       225
       +
                   '';

     

       226
       226
       +
                 };

     

       227
       227
       +
                 idlesocket = mkOption {

     

       228
       228
       +
                   type = path;

     

       229
       229
       +
                   default = "/run/cyrus/idle";

     

       230
       230
       +
                   description = ''

     

       231
       231
       +
                     Unix socket that idled listens on.

     

       232
       232
       +
                   '';

     

       233
       233
       +
                 };

     

       234
       234
       +
                 notifysocket = mkOption {

     

       235
       235
       +
                   type = path;

     

       236
       236
       +
                   default = "/run/cyrus/notify";

     

       237
       237
       +
                   description = ''

     

       238
       238
       +
                     Unix domain socket that the mail notification daemon listens on.

     

       239
       239
       +
                   '';

     

       240
       240
       +
                 };

     

       241
       241
       +
               };

     

       242
       242
       +
             };

     

       243
       243
       +
             default = {

     

       244
       244
       +
               admins = [ "cyrus" ];

     

       245
       245
       +
               allowplaintext = true;

     

       246
       246
       +
               defaultdomain = "localhost";

     

       247
       247
       +
               defaultpartition = "default";

     

       248
       248
       +
               duplicate_db_path = "/run/cyrus/db/deliver.db";

     

       249
       249
       +
               hashimapspool = true;

     

       250
       250
       +
               httpmodules = [

     

       251
       251
       +
                 "carddav"

     

       252
       252
       +
                 "caldav"

     

       253
       253
       +
               ];

     

       254
       254
       +
               mboxname_lockpath = "/run/cyrus/lock";

     

       255
       255
       +
               partition-default = "/var/lib/cyrus/storage";

     

       256
       256
       +
               popminpoll = 1;

     

       257
       257
       +
               proc_path = "/run/cyrus/proc";

     

       258
       258
       +
               ptscache_db_path = "/run/cyrus/db/ptscache.db";

     

       259
       259
       +
               sasl_auto_transition = true;

     

       260
       260
       +
               sasl_pwcheck_method = [ "saslauthd" ];

     

       261
       261
       +
               sievedir = "/var/lib/cyrus/sieve";

     

       262
       262
       +
               statuscache_db_path = "/run/cyrus/db/statuscache.db";

     

       263
       263
       +
               syslog_prefix = "cyrus";

     

       264
       264
       +
               tls_client_ca_dir = "/etc/ssl/certs";

     

       265
       265
       +
               tls_session_timeout = 1440;

     

       266
       266
       +
               tls_sessions_db_path = "/run/cyrus/db/tls_sessions.db";

     

       267
       267
       +
               virtdomains = "on";

     

       268
       268
       +
             };

     

       269
       269
       +
             description = "IMAP configuration settings. See [imapd.conf(5)](https://www.cyrusimap.org/imap/reference/manpages/configs/imapd.conf.html)";

     

       270
       270
       +
           };

     

       271
       271
       +
       

     

       272
       272
       +
           user = mkOption {

     

       273
       273
       +
             type = nullOr str;

     

       274
       274
       +
             default = null;

     

       275
       275
       +
             description = "Cyrus IMAP user name. If this is not set, a user named `cyrus` will be created.";

     

       276
       276
       +
           };

     

       277
       277
       +
       

     

       278
       278
       +
           group = mkOption {

     

       279
       279
       +
             type = nullOr str;

     

       280
       280
       +
             default = null;

     

       281
       281
       +
             description = "Cyrus IMAP group name. If this is not set, a group named `cyrus` will be created.";

     

       282
       282
       +
           };

     

       283
       283
       +
       

     

       284
       284
       +
           imapdConfigFile = mkOption {

     

       285
       285
       +
             type = nullOr path;

     

       286
       286
       +
             default = null;

     

       287
       287
       +
             description = "Path to the configuration file used for cyrus-imap.";

     

       288
       288
       +
             apply = v: if v != null then v else pkgs.writeText "imapd.conf" imapdConfig;

     

       289
       289
       +
           };

     

       290
       290
       +
       

     

       291
       291
       +
           cyrusConfigFile = mkOption {

     

       292
       292
       +
             type = nullOr path;

     

       293
       293
       +
             default = null;

     

       294
       294
       +
             description = "Path to the configuration file used for Cyrus.";

     

       295
       295
       +
             apply = v: if v != null then v else pkgs.writeText "cyrus.conf" cyrusConfig;

     

       296
       296
       +
           };

     

       297
       297
       +
       

     

       298
       298
       +
           sslCACert = mkOption {

     

       299
       299
       +
             type = nullOr str;

     

       300
       300
       +
             default = null;

     

       301
       301
       +
             description = "File path which containing one or more CA certificates to use.";

     

       302
       302
       +
           };

     

       303
       303
       +
       

     

       304
       304
       +
           sslServerCert = mkOption {

     

       305
       305
       +
             type = nullOr str;

     

       306
       306
       +
             default = null;

     

       307
       307
       +
             description = "File containing the global certificate used for all services (IMAP, POP3, LMTP, Sieve)";

     

       308
       308
       +
           };

     

       309
       309
       +
       

     

       310
       310
       +
           sslServerKey = mkOption {

     

       311
       311
       +
             type = nullOr str;

     

       312
       312
       +
             default = null;

     

       313
       313
       +
             description = "File containing the private key belonging to the global server certificate.";

     

       314
       314
       +
           };

     

       315
       315
       +
         };

     

       316
       316
       +
       

     

       317
       317
       +
         config = mkIf cfg.enable {

     

       318
       318
       +
           users.users.cyrus = optionalAttrs (cfg.user == null) {

     

       319
       319
       +
             description = "Cyrus IMAP user";

     

       320
       320
       +
             isSystemUser = true;

     

       321
       321
       +
             group = optionalString (cfg.group == null) "cyrus";

     

       322
       322
       +
           };

     

       323
       323
       +
       

     

       324
       324
       +
           users.groups.cyrus = optionalAttrs (cfg.group == null) { };

     

       325
       325
       +
       

     

       326
       326
       +
           environment.etc."imapd.conf".source = cfg.imapdConfigFile;

     

       327
       327
       +
           environment.etc."cyrus.conf".source = cfg.cyrusConfigFile;

     

       328
       328
       +
       

     

       329
       329
       +
           systemd.services.cyrus-imap = {

     

       330
       330
       +
             description = "Cyrus IMAP server";

     

       331
       331
       +
       

     

       332
       332
       +
             after = [ "network.target" ];

     

       333
       333
       +
             wantedBy = [ "multi-user.target" ];

     

       334
       334
       +
             restartTriggers = [

     

       335
       335
       +
               "/etc/imapd.conf"

     

       336
       336
       +
               "/etc/cyrus.conf"

     

       337
       337
       +
             ];

     

       338
       338
       +
       

     

       339
       339
       +
             startLimitIntervalSec = 60;

     

       340
       340
       +
             environment = {

     

       341
       341
       +
               CYRUS_VERBOSE = mkIf cfg.debug "1";

     

       342
       342
       +
               LISTENQUEUE = builtins.toString cfg.listenQueue;

     

       343
       343
       +
             };

     

       344
       344
       +
             serviceConfig = {

     

       345
       345
       +
               User = if (cfg.user == null) then "cyrus" else cfg.user;

     

       346
       346
       +
               Group = if (cfg.group == null) then "cyrus" else cfg.group;

     

       347
       347
       +
               Type = "simple";

     

       348
       348
       +
               ExecStart = "${cyrus-imapdPkg}/libexec/master -l $LISTENQUEUE -C /etc/imapd.conf -M /etc/cyrus.conf -p /run/cyrus/master.pid -D";

     

       349
       349
       +
               Restart = "on-failure";

     

       350
       350
       +
               RestartSec = "1s";

     

       351
       351
       +
               RuntimeDirectory = "cyrus";

     

       352
       352
       +
               StateDirectory = "cyrus";

     

       353
       353
       +
       

     

       354
       354
       +
               # Hardening

     

       355
       355
       +
               AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];

     

       356
       356
       +
               PrivateTmp = true;

     

       357
       357
       +
               PrivateDevices = true;

     

       358
       358
       +
               ProtectSystem = "full";

     

       359
       359
       +
               CapabilityBoundingSet = [ "~CAP_NET_ADMIN CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_MODULE" ];

     

       360
       360
       +
               MemoryDenyWriteExecute = true;

     

       361
       361
       +
               ProtectKernelModules = true;

     

       362
       362
       +
               ProtectKernelTunables = true;

     

       363
       363
       +
               ProtectControlGroups = true;

     

       364
       364
       +
               RestrictAddressFamilies = [

     

       365
       365
       +
                 "AF_INET"

     

       366
       366
       +
                 "AF_INET6"

     

       367
       367
       +
                 "AF_NETLINK"

     

       368
       368
       +
                 "AF_UNIX"

     

       369
       369
       +
               ];

     

       370
       370
       +
               RestrictNamespaces = true;

     

       371
       371
       +
               RestrictRealtime = true;

     

       372
       372
       +
             };

     

       373
       373
       +
             preStart = ''

     

       374
       374
       +
               mkdir -p '${cfg.imapdSettings.configdirectory}/socket' '${cfg.tmpDBDir}' /run/cyrus/proc /run/cyrus/lock

     

       375
       375
       +
             '';

     

       376
       376
       +
           };

     

       377
       377
       +
           environment.systemPackages = [ cyrus-imapdPkg ];

     

       378
       378
       +
         };

     

       379
       379
       +
       }

nixos/tests/all-tests.nix

···

       245
       245
        
         curl-impersonate = handleTest ./curl-impersonate.nix {};

     

       246
       246
        
         custom-ca = handleTest ./custom-ca.nix {};

     

       247
       247
        
         croc = handleTest ./croc.nix {};

     

       248
       248
       +
         cyrus-imap = runTest ./cyrus-imap.nix;

     

       248
       249
        
         darling = handleTest ./darling.nix {};

     

       249
       250
        
         darling-dmg = runTest ./darling-dmg.nix;

     

       250
       251
        
         dae = handleTest ./dae.nix {};

+120

nixos/tests/cyrus-imap.nix

···

       1
       1
       +
       { lib, pkgs, ... }:

     

       2
       2
       +
       {

     

       3
       3
       +
         name = "cyrus-imap";

     

       4
       4
       +
       

     

       5
       5
       +
         meta = {

     

       6
       6
       +
           maintainers = with lib.maintainers; [ moraxyc ];

     

       7
       7
       +
         };

     

       8
       8
       +
       

     

       9
       9
       +
         nodes.machine =

     

       10
       10
       +
           { pkgs, ... }:

     

       11
       11
       +
           {

     

       12
       12
       +
             environment.systemPackages = with pkgs; [

     

       13
       13
       +
               curl

     

       14
       14
       +
               sudo

     

       15
       15
       +
             ];

     

       16
       16
       +
             services.saslauthd = {

     

       17
       17
       +
               enable = true;

     

       18
       18
       +
               config = ''

     

       19
       19
       +
                 DESC="SASL Authentication Daemon"

     

       20
       20
       +
                 NAME="saslauthd"

     

       21
       21
       +
                 MECH_OPTIONS=""

     

       22
       22
       +
                 THREADS=5

     

       23
       23
       +
                 START=yes

     

       24
       24
       +
                 OPTIONS="-c -m /run/saslauthd"

     

       25
       25
       +
               '';

     

       26
       26
       +
             };

     

       27
       27
       +
             services.cyrus-imap = {

     

       28
       28
       +
               enable = true;

     

       29
       29
       +
               cyrusSettings = {

     

       30
       30
       +
                 START = {

     

       31
       31
       +
                   recover = {

     

       32
       32
       +
                     cmd = [

     

       33
       33
       +
                       "ctl_cyrusdb"

     

       34
       34
       +
                       "-r"

     

       35
       35
       +
                     ];

     

       36
       36
       +
                   };

     

       37
       37
       +
                 };

     

       38
       38
       +
                 EVENTS = {

     

       39
       39
       +
                   tlsprune = {

     

       40
       40
       +
                     cmd = [ "tls_prune" ];

     

       41
       41
       +
                     at = 400;

     

       42
       42
       +
                   };

     

       43
       43
       +
                   delprune = {

     

       44
       44
       +
                     cmd = [

     

       45
       45
       +
                       "cyr_expire"

     

       46
       46
       +
                       "-E"

     

       47
       47
       +
                       "3"

     

       48
       48
       +
                     ];

     

       49
       49
       +
                     at = 400;

     

       50
       50
       +
                   };

     

       51
       51
       +
                   deleteprune = {

     

       52
       52
       +
                     cmd = [

     

       53
       53
       +
                       "cyr_expire"

     

       54
       54
       +
                       "-E"

     

       55
       55
       +
                       "4"

     

       56
       56
       +
                       "-D"

     

       57
       57
       +
                       "28"

     

       58
       58
       +
                     ];

     

       59
       59
       +
                     at = 430;

     

       60
       60
       +
                   };

     

       61
       61
       +
                   expungeprune = {

     

       62
       62
       +
                     cmd = [

     

       63
       63
       +
                       "cyr_expire"

     

       64
       64
       +
                       "-E"

     

       65
       65
       +
                       "4"

     

       66
       66
       +
                       "-X"

     

       67
       67
       +
                       "28"

     

       68
       68
       +
                     ];

     

       69
       69
       +
                     at = 445;

     

       70
       70
       +
                   };

     

       71
       71
       +
                   checkpoint = {

     

       72
       72
       +
                     cmd = [

     

       73
       73
       +
                       "ctl_cyrusdb"

     

       74
       74
       +
                       "-c"

     

       75
       75
       +
                     ];

     

       76
       76
       +
                     period = 30;

     

       77
       77
       +
                   };

     

       78
       78
       +
                 };

     

       79
       79
       +
                 SERVICES = {

     

       80
       80
       +
                   http = {

     

       81
       81
       +
                     cmd = [ "httpd" ];

     

       82
       82
       +
                     listen = "80";

     

       83
       83
       +
                     prefork = 0;

     

       84
       84
       +
                   };

     

       85
       85
       +
                   imap = {

     

       86
       86
       +
                     cmd = [ "imapd" ];

     

       87
       87
       +
                     listen = "143";

     

       88
       88
       +
                     prefork = 0;

     

       89
       89
       +
                   };

     

       90
       90
       +
                   lmtpunix = {

     

       91
       91
       +
                     cmd = [ "lmtpd" ];

     

       92
       92
       +
                     listen = "/run/cyrus/lmtp";

     

       93
       93
       +
                     prefork = 0;

     

       94
       94
       +
                   };

     

       95
       95
       +
                   notify = {

     

       96
       96
       +
                     cmd = [ "notifyd" ];

     

       97
       97
       +
                     listen = "/run/cyrus/notify";

     

       98
       98
       +
                     proto = "udp";

     

       99
       99
       +
                     prefork = 0;

     

       100
       100
       +
                   };

     

       101
       101
       +
                 };

     

       102
       102
       +
               };

     

       103
       103
       +
             };

     

       104
       104
       +
           };

     

       105
       105
       +
       

     

       106
       106
       +
         testScript = ''

     

       107
       107
       +
           machine.wait_for_unit("saslauthd.service")

     

       108
       108
       +
           machine.wait_for_unit("cyrus-imap.service")

     

       109
       109
       +
       

     

       110
       110
       +
           machine.wait_for_open_port(80)

     

       111
       111
       +
           machine.wait_for_open_port(143)

     

       112
       112
       +
       

     

       113
       113
       +
           machine.succeed("echo 'secret' | ${lib.getExe' pkgs.cyrus_sasl.bin "saslpasswd2"} -p -c cyrus")

     

       114
       114
       +
           machine.succeed("chown cyrus /etc/sasldb2")

     

       115
       115
       +
       

     

       116
       116
       +
           machine.succeed("sudo -ucyrus curl --fail --max-time 10 imap://cyrus:secret@localhost:143")

     

       117
       117
       +
           machine.fail("curl --fail --max-time 10 imap://cyrus:wrongsecret@localhost:143")

     

       118
       118
       +
           machine.fail("curl --fail --max-time 10 -X PROPFIND -H 'Depth: 1' 'http://localhost/dav/addressbooks/user/cyrus@localhost/Default'")

     

       119
       119
       +
         '';

     

       120
       120
       +
       }

test

This is a binary file and will not be displayed.