macronova/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Setup vaultwarden smtp

Browse source
This commit is contained in:
Invariantspace 2024-12-14 22:41:34 -08:00
parent cee19a8b27
commit e15bfa0b90
3 changed files with 23 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

11
linux/singularity/mailserver.nix
View file

@ -1,6 +1,7 @@
{config, ...}:
with config.constants; let
mailSecret = "mail/${userName}/password";
userSecret = "mail/${userName}/password";
vaultwardenSecret = "mail/vaultwarden/password";
in {
mailserver = {
enable = true;
@ -10,11 +11,15 @@ in {
loginAccounts = {
"${userName}@${domain}" = {
aliases = [postMaster];
hashedPasswordFile = config.sops.secrets.${mailSecret}.path;
hashedPasswordFile = config.sops.secrets.${userSecret}.path;
};
${config.services.vaultwarden.config.SMTP_FROM}.hashedPasswordFile = config.sops.secrets.${vaultwardenSecret}.path;
};
certificateScheme = "acme";
};
sops.secrets.${mailSecret} = {};
sops.secrets = {
${userSecret} = {};
${vaultwardenSecret} = {};
};
}

12
linux/singularity/vaultwarden.nix
View file

@ -4,11 +4,19 @@ in {
services.vaultwarden = {
enable = true;
config = with config.constants; {
# Disable signup
SIGNUPS_ALLOWED = false;
DOMAIN = "https://vault.${domain}";
# Specify service port
ROCKET_ADDRESS = localhost;
ROCKET_PORT = port.vault;
# Disable signup
SIGNUPS_ALLOWED = false;
# SMTP config
SMTP_FROM = "vaultwarden@${domain}";
SMTP_FROM_NAME = "vaultwarden";
SMTP_HOST = "mail.${domain}";
SMTP_USERNAME = "vaultwarden@${domain}";
SMTP_PORT = 587;
SMTP_SECURITY = "starttls";
};
environmentFile = config.sops.secrets.${vaultEnvironment}.path;
};