nixos-server/modules, branch stalwartnixos-config for vhack.eu servers https://vhack.euhttp://git.foss-syndicate.org/vhack.eu/nixos-server/atom?h=stalwart2025-04-23T19:14:09+00:00modules/stalwart-mail: Add admin account password2025-04-23T19:14:09+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-23T18:58:41+00:00urn:sha1:4dae327cc211e18efa71442599d99c67d03e1f14
This is required to start creating accounts via the webinterface.
modules/taskchampion: Make its data directory owned by taskchampion user2025-04-23T15:18:06+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-23T15:18:06+00:00urn:sha1:440cd526d8e7914a48f423c289cb50c42ba8effdmodules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy2025-04-23T10:25:07+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-23T10:25:07+00:00urn:sha1:ed901a996db4296e55953b6f91ed097f234c8eb2
This includes setting things, like setting the `X-Forwarded-For` header.
modules/constants: Also add a user to each group, so that duplicated gids are avoided2025-04-23T10:24:31+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-23T10:24:31+00:00urn:sha1:3721a3474f162748c7a53f29a542a28edbc0f28amodules/stalwart-mail: Don't restart the systemd service2025-04-23T10:10:32+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:12:36+00:00urn:sha1:226e970dafa979bdf713e045ab916f0e6c3515ef
Restarting might be useful, if stalwart is actually _running_ in prod,
but currently the constant restart makes it very difficult to
debug (or even stop) the service.
modules/stalwart-mail: Enable the http self-service interface2025-04-23T10:10:31+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:12:05+00:00urn:sha1:b4d3b4a6663e66c508ded05ea9668083e7e5c73fmodules/nginx: Set the "acme" group as group of the "acme" user2025-04-23T10:10:30+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:10:17+00:00urn:sha1:7c22d0244fccf6fcc0de54808bef4f0976c6bdf9
For some reason, this is not done already. Setting this prevents an
assertion being thrown, that the "acme" user does not have a group.
modules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert2025-04-23T10:10:28+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-12T14:08:30+00:00urn:sha1:e48c609796a9f819e75eb05b7f4833f2d442cee7
This is needed for the http challenge (and for the potential to use
nginx as a proxy in the future.)
modules/stalwart-mail: Explicitly list out valid password hashes2025-04-23T10:10:27+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-11T09:57:54+00:00urn:sha1:f0f8df8f40cefbfc4d676352a94dbe35cc99a0db
If a password hash does not match stalwart's know ones, it will just
treat it as plaintext. This is obviously very bad, and should be
avoided.
modules/stalwart-mail: Make `cfg.principals` nullable2025-04-23T10:10:27+00:00Benedikt Peetzbenedikt.peetz@b-peetz.de2025-04-11T09:50:13+00:00urn:sha1:9c4a209c50518e54fc806e2901ae7039e8826163
This makes it possible to use the internal storage