commit d5ec2a2c9dc7410d02c138e0f618717fe326be3e · pyrox.dev/nixpkgs

+29 -5
nixos/modules/services/mail/postsrsd.nix
···

       20
       20
        
               description = "Whether to enable the postsrsd SRS server for Postfix.";

     

       21
       21
        
             };

     

       22
       22
        
       

     

       23
       23
       +
             secretsFile = mkOption {

     

       24
       24
       +
               type = types.path;

     

       25
       25
       +
               default = "/var/lib/postsrsd/postsrsd.secret";

     

       26
       26
       +
               description = "Secret keys used for signing and verification";

     

       27
       27
       +
             };

     

       28
       28
       +
       

     

       23
       29
        
             domain = mkOption {

     

       24
       30
        
               type = types.str;

     

       25
       31
        
               description = "Domain name for rewrite";

     

       26
       32
        
             };

     

       27
       33
        
       

     

       28
       28
       -
             secretsFile = mkOption {

     

       29
       29
       -
               type = types.path;

     

       30
       30
       -
               default = "/var/lib/postsrsd/postsrsd.secret";

     

       31
       31
       -
               description = "Secret keys used for signing and verification";

     

       34
       34
       +
             separator = mkOption {

     

       35
       35
       +
               type = types.enum ["-" "=" "+"];

     

       36
       36
       +
               default = "=";

     

       37
       37
       +
               description = "First separator character in generated addresses";

     

       32
       38
        
             };

     

       33
       39
        
       

     

       40
       40
       +
             # bindAddress = mkOption { # uncomment once 1.5 is released

     

       41
       41
       +
             #   type = types.str;

     

       42
       42
       +
             #   default = "127.0.0.1";

     

       43
       43
       +
             #   description = "Socket listen address";

     

       44
       44
       +
             # };

     

       45
       45
       +
       

     

       34
       46
        
             forwardPort = mkOption {

     

       35
       47
        
               type = types.int;

     

       36
       48
        
               default = 10001;

     
···

       41
       53
        
               type = types.int;

     

       42
       54
        
               default = 10002;

     

       43
       55
        
               description = "Port for the reverse SRS lookup";

     

       56
       56
       +
             };

     

       57
       57
       +
       

     

       58
       58
       +
             timeout = mkOption {

     

       59
       59
       +
               type = types.int;

     

       60
       60
       +
               default = 1800;

     

       61
       61
       +
               description = "Timeout for idle client connections in seconds";

     

       62
       62
       +
             };

     

       63
       63
       +
       

     

       64
       64
       +
             excludeDomains = mkOption {

     

       65
       65
       +
               type = types.listOf types.str;

     

       66
       66
       +
               default = [];

     

       67
       67
       +
               description = "Origin domains to exclude from rewriting in addition to primary domain";

     

       44
       68
        
             };

     

       45
       69
        
       

     

       46
       70
        
             user = mkOption {

     
···

       86
       110
        
             path = [ pkgs.coreutils ];

     

       87
       111
        
       

     

       88
       112
        
             serviceConfig = {

     

       89
       89
       -
               ExecStart = ''${pkgs.postsrsd}/sbin/postsrsd "-s${cfg.secretsFile}" "-d${cfg.domain}" -f${toString cfg.forwardPort} -r${toString cfg.reversePort}'';

     

       113
       113
       +
               ExecStart = ''${pkgs.postsrsd}/sbin/postsrsd "-s${cfg.secretsFile}" "-d${cfg.domain}" -a${cfg.separator} -f${toString cfg.forwardPort} -r${toString cfg.reversePort} -t${toString cfg.timeout} "-X${concatStringsSep "," cfg.excludeDomains}"'';

     

       90
       114
        
               User = cfg.user;

     

       91
       115
        
               Group = cfg.group;

     

       92
       116
        
               PermissionsStartOnly = true;