blob: 7102958e721e9dba7b487bb3bf9eaaf4a6c8d574 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
# vim: ts=2
{...}: let
all_admins = [
"sils@vhack.eu"
"soispha@vhack.eu"
"nightingale@vhack.eu"
];
in {
enable = true;
fqdn = "server1.vhack.eu";
domains = ["vhack.eu"];
useFsLayout = true;
loginAccounts = {
"sils@vhack.eu" = {
hashedPassword = "$2b$05$RW/Svgk7iGxvP5W7ZwUZ1e.a3fj4fteevb2MtfFYYD0d1DQ17y9Fm";
};
"soispha@vhack.eu" = {
hashedPassword = "$2b$05$XX36sJuHNbTFvi8DFldscOeQBHahluSkiUqD9QGzQaET7NJusSuQW";
};
"nightingale@vhack.eu" = {
hashedPassword = "$2b$05$THIS_PASSWORD_HASH_IS_NOT_REAL,_PLEASE_CHANGE_IT_..._"; # TODO change
};
};
extraVirtualAliases = {
"abuse@vhack.eu" = all_admins;
"postmaster@vhack.eu" = all_admins;
"admin@vhack.eu" = all_admins;
};
mailDirectory = "/srv/mail/vmail";
dkimKeyDirectory = "/srv/mail/dkim";
sieveDirectory = "/srv/mail/sieve";
backup.snapshotRoot = "/srv/mail/backup";
enableImap = false;
enableImapSsl = true;
enablePop3 = false;
enablePop3Ssl = true;
# SMTP
enableSubmission = false;
enableSubmissionSsl = true;
openFirewall = false; # handled below
keyFile = "/var/lib/acme/server1.vhack.eu/key.pem";
certificateScheme = 1;
certificateFile = "/var/lib/acme/server1.vhack.eu/fullchain.pem";
}
|
