From b5fc07416652a445f15946ce7e5fc48766cf6722 Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Tue, 24 Dec 2024 16:09:20 +0100
Subject: refactor(modules/impermanence): Migrate to by-name while distributing
 mods

---
 system/services/mail/default.nix      |  4 +++
 system/services/mail/impermanence.nix | 46 +++++++++++++++++++++++++++++++++++
 2 files changed, 50 insertions(+)
 create mode 100644 system/services/mail/impermanence.nix

(limited to 'system/services/mail')

diff --git a/system/services/mail/default.nix b/system/services/mail/default.nix
index 382a87f..c69e6bd 100644
--- a/system/services/mail/default.nix
+++ b/system/services/mail/default.nix
@@ -6,6 +6,10 @@
   ];
   users = import ./users.nix {};
 in {
+  imports = [
+    ./impermanence.nix
+  ];
+
   mailserver =
     lib.recursiveUpdate {
       enable = true;
diff --git a/system/services/mail/impermanence.nix b/system/services/mail/impermanence.nix
new file mode 100644
index 0000000..22a5318
--- /dev/null
+++ b/system/services/mail/impermanence.nix
@@ -0,0 +1,46 @@
+{...}: {
+  vhack.persist.directories = [
+    {
+      directory = "/var/lib/mail/backup";
+      user = "virtualMail";
+      group = "virtualMail";
+      mode = "0700";
+    }
+    {
+      directory = "/var/lib/mail/sieve";
+      user = "virtualMail";
+      group = "virtualMail";
+      mode = "0700";
+    }
+    {
+      directory = "/var/lib/mail/vmail";
+      user = "virtualMail";
+      group = "virtualMail";
+      mode = "0700";
+    }
+    {
+      directory = "/var/lib/mail/dkim";
+      user = "opendkim";
+      group = "opendkim";
+      mode = "0700";
+    }
+    {
+      directory = "/var/lib/postfix/data";
+      user = "postfix";
+      group = "postfix";
+      mode = "0700";
+    }
+    {
+      directory = "/var/lib/postfix/queue";
+      user = "postfix";
+      group = "postfix";
+      mode = "0700";
+    }
+    {
+      directory = "/var/lib/rspamd";
+      user = "rspamd";
+      group = "rspamd";
+      mode = "0700";
+    }
+  ];
+}
-- 
cgit 1.4.1