about summary refs log tree commit diff stats
path: root/pkgs/by-name/st/stalwart-mail-patched/package.nix
blob: 062ab2cccc1451938a90cdaad5d5539571b72eb3 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
{
  stalwart-mail,
  callPackage,
  nixLib,
  rustPlatform,
  lib,
}: let
  spamfilter = callPackage ./spam-filter.nix {};
in
  stalwart-mail.override {
    rustPlatform =
      rustPlatform
      // {
        buildRustPackage = prev:
          rustPlatform.buildRustPackage (
            lib.attrsets.recursiveUpdate
            prev
            {
              pname = "stalwart-mail-patched";

              passthru = nixLib.warnMerge (prev.passthru or {}) {
                # Use a reproducible source for the spamfilter instead of fetching it at runtime from GitHub.
                inherit spamfilter;
              } "stalwart-mail passthru";

              cargoHash = "sha256-Rq18JumjKYt97WKIqnLakS+FQwsjt70irlYBYAYm3H8=";

              # The NixOS build tests should check if this works.
              # And this shaves of around 50% of the build time.
              doCheck = false;

              # We are already overriding it, so shaving of some unused features is okay.
              buildNoDefaultFeatures = true;
              buildFeatures = [
                # "sqlite"
                # "postgres"
                # "mysql"
                "rocks"
                # "elastic"
                # "s3"
                "redis"
                "tls-native-roots"
              ];

              cargoPatches =
                (prev.cargoPatches or [])
                ++ [
                  # `stalwart-mail` uses their bundled store, which makes it impossible to use our
                  # own CA certificate (e.g., for tests). Thus use a native version.
                  ./patches/0001-Allow-to-switch-to-operating-system-CA-root-store.patch
                ];

              # Check that the enterprise feature is really disabled.
              postCheck =
                (prev.postCheck or "")
                +
                # bash
                ''
                  if grep "enterprise" ./target/*/release/stalwart-mail.d; then
                    echo "ERROR: Proprietary 'enterprise' feature active."
                    exit 1
                  fi
                '';

              meta.mainProgram = prev.meta.mainProgram or "stalwart-mail";
            }
          );
      };
  }