nixos-server/modules/by-name/st/stalwart-mail, branch mainnixos-config for vhack.eu servers https://vhack.euhttp://git.foss-syndicate.org/vhack.eu/nixos-server/atom/modules/by-name/st/stalwart-mail?h=main2026-05-30T16:05:55Zserver3/stalwart: Disable2026-05-30T16:05:55ZBenedikt Peetzbenedikt.peetz@b-peetz.de2026-05-30T16:05:55Zurn:sha1:f90b32c374af3ac985df734244f44f549eac8e09
There is no, and really no, reason why this service is running.
modules/stalwart-mail: Use the nixpkgs' starwart package2025-12-18T16:17:01ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-12-18T16:17:01Zurn:sha1:3595b360b550398c00931aeb44477ff0264cc523
Ours is hopelessly broken and right now also pointless.
pkgs/stalwart-mail: Update to nixos 25.052025-06-06T19:37:46ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-06-06T19:37:46Zurn:sha1:fccc098fa6d5636a6dad9a393414d7a1dfbac8ec
Now the stalwart-mail package is by default free. As such, we could drop
the respective patches.
modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy2025-04-23T10:25:07ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-23T10:25:07Zurn:sha1:ed901a996db4296e55953b6f91ed097f234c8eb2
This includes setting things, like setting the `X-Forwarded-For` header.
modules/stalwart-mail: Don't restart the systemd service2025-04-23T10:10:32ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:12:36Zurn:sha1:226e970dafa979bdf713e045ab916f0e6c3515ef
Restarting might be useful, if stalwart is actually _running_ in prod,
but currently the constant restart makes it very difficult to
debug (or even stop) the service.
modules/stalwart-mail: Enable the http self-service interface2025-04-23T10:10:31ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:12:05Zurn:sha1:b4d3b4a6663e66c508ded05ea9668083e7e5c73fmodules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert2025-04-23T10:10:28ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:08:30Zurn:sha1:e48c609796a9f819e75eb05b7f4833f2d442cee7
This is needed for the http challenge (and for the potential to use
nginx as a proxy in the future.)
modules/stalwart-mail: Explicitly list out valid password hashes2025-04-23T10:10:27ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-11T09:57:54Zurn:sha1:f0f8df8f40cefbfc4d676352a94dbe35cc99a0db
If a password hash does not match stalwart's know ones, it will just
treat it as plaintext. This is obviously very bad, and should be
avoided.
modules/stalwart-mail: Make `cfg.principals` nullable2025-04-23T10:10:27ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-11T09:50:13Zurn:sha1:9c4a209c50518e54fc806e2901ae7039e8826163
This makes it possible to use the internal storage
modules/stalwart-mail: Use correct group name for `redis-stalwart-mail`2025-04-23T10:10:25ZBenedikt Peetzbenedikt.peetz@b-peetz.de2025-04-11T09:43:53Zurn:sha1:5e4fa9e3f4c569edb8967d9cb3c44169617e7597