summaryrefslogtreecommitdiffstats
path: root/mail-server
AgeCommit message (Collapse)Author
2022-02-24rspamd: set default port for redisNaïm Favier
Since we are now using services.redis.servers.rspamd, the port defaults to 0 (i.e. do not bind a TCP socket). We still want rspamd to connect to redis via TCP, so set a default port that is one above the default redis port.
2022-02-24Update nixos-unstable and drop 21.11Naïm Favier
2021-12-05nginx: generate certificates for custom domains and subdomainsIzorkin
2021-12-01Revert "rspamd: make sure redis is started over TCP socket"Kerstin Humm
This reverts commit 4f0f0128d8d4115571b3ff0ce2378ddf7de7278e. Redis does seem to run fine with both unixSocket and TCP enabled. This broke people's setups.
2021-11-26Fix fullTextSearch.enable=falseLionello Lunesu
2021-11-17rspamd: make sure redis is started over TCP socketDwarfMaster
2021-11-07opendkim: don't recreate keys if private key is presentLionello Lunesu
2021-11-07nginx.nix: don't reload nginxGuillaume Girol
Fixes #227 Reloading nginx manually is actually not needed (see nginx-config-reload.service) and causes deadlocks.
2021-10-14Set DKIM policy to relaxed/relaxedEro Sennin
And make this policy configurable.
2021-08-11Ensure locally-delivered mails have the X-Original-To headerSteve Purcell
See #223
2021-08-06Use the Junk mailbox name defined in the mailboxes attrsfix-junkAntoine Eiche
Previously, the static Junk mailbox was used in sieve script to move spam messages. This patch gets the Junk mailbox defined in the dovecot mailboxes attribute instead. Fixes #224
2021-07-24Remove non longer supported configurations (<21.05)cleaningAntoine Eiche
2021-06-03kresd: no need to explicitly set nameserverRobert Schütz
Since https://github.com/NixOS/nixpkgs/pull/124391, enabling kreasd also sets `networking.resolvconf.useLocalResolver = true`.
2021-04-18Make vmail_user a system userMilan Pässler
This is required since https://github.com/NixOS/nixpkgs/pull/115332
2021-04-07Move indexDir option to the mailserver scopelewo/indexDirAntoine Eiche
This option has been initially in the mailserver.fullTextSearch scope. However, this option modifies the location of all index files of dovecot and not only those used by the full text search feature. It is then more relevant to have this option in the mailserver top level scope. Moreover, the default option has been changed to null in order to keep existing index files where they are: changing the index location means recreating all index files. The fts documentation however recommend to change this default location when enabling the fts feature.
2021-03-22Feature/configurable delimiterEmmanouil Kampitakis
2021-03-21Use services.clamav.daemon.settings if it is availableMatt Votava
2021-03-07Store FTS index in directory per domain & user to avoid collisionsAndreas Rammhold
Previously all the xapian files and logs would be stored in the same folder for all users. This couid probably lead to weird situations where all users get the same search results.
2021-03-04add full text search supportSymphorien Gibol
2021-02-09Make opening ports in the firewall optionalSimon Žlender
2021-02-06postfix: forwarding emails of login accounts with keeping local copyAntoine Eiche
When a local account address is forwarded, the mails were not locally kept. This was due to the way lookup tables were internally managed. Instead of using lists to represent Postfix lookup tables, we now use attribute sets: they can then be easily merged. A regression test for https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/issues/ has been added: it sets a forward on a local address and ensure an email sent to this address is locally kept. Fixes #205
2021-01-31rspamd: disable dkim signingIzorkin
2020-12-23Set mailserver.policydSPFExtraConfig in a debug moduleAntoine Eiche
The line type of this option make its concatenation cleaner: the user doesn't have to manually add `\n` to its policydSPFExtraConfig value when debug in set.
2020-12-04Update systemd.nixNaïm Favier
2020-11-30Do not hardcode paths to acme certificatesNaïm Favier
2020-11-29Recommend bcrypt passwords everywhereHenri Menke
2020-11-21Configurable sieve script directoryHenri Menke
2020-10-05test.dovecot: ensure port 143 is closed when enableImap is not setAntoine Eiche
The test also checks the connection on the imap port 993 is a SSL connection.
2020-10-05add full support for tls wrapped modeMilan Pässler
2020-10-04Support sandboxed opendkimAntoine Eiche
2020-09-28Add `forwards` optionAntoine Eiche
This option allow to forward mails to external addresses.
2020-09-18Add a separate sendingFqdn optionJames ‘Twey’ Kay
2020-07-06Setup rspamd controller to serve web UI assetsXavier Vello
2020-06-19Fix passwfile updateBrian Olsen
Currently oneshot services are not re-run on NixOS activate and that meant that you needed to manually restart `gen-passwd-file` for new users to be available. This commit removes the `gen-passwd-file` service and instead simply calls the same script in the dovecot2 preStart.
2020-05-27Enable dovecot option to prefer server ciphersBenjamin Asbach
This might prevent misconfigured clients to use a weak cipher when stronger ciphers are available.
2020-05-27Set TLSv1.2 as minimal TLS version for dovecotBenjamin Asbach
TLSv1 and TLSv1.1 are commonly opinioned as deprecated.
2020-05-25Fix spelling of `lmtp` in optionRyan Trinkle
2020-05-22Switch from using postfix extraConfig to configBrian Olsen
`services.postfix.extraConfig` is just a string while the `services.postfix.config` option configures the same thing but with a typed attrset instead which is easier to manipulate and override in Nix.
2020-05-13Enabled TLS 1.3 supportBenjamin Asbach
2020-05-08Merge branch ↵Antoine Eiche
'eqyiel/nixos-mailserver-feat/make-lmtp_save_to_detail_mailbox-optional'
2020-05-08Rename rejectMessage to sendOnlyRejectMessageAntoine Eiche
2020-05-08Add send-only accountsGalen Abell
2020-05-05rspamd: configure redis backendSymphorien Gibol
The sqlite backed is deprecated, and the redis backend is the default since rspamd 2.0. Not having redis started results in such errors: rspamd_redis_init: cannot init redis backend for BAYES_SPAM To migrate the sqlite database, run rspamadm statconvert --spam-db /var/lib/rspamd/bayes.spam.sqlite --ham-db /var/lib/rspamd/bayes.ham.sqlite -h 127.0.0.1:6379 --symbol-ham BAYES_HAM --symbol-spam BAYES_SPAM The current module implements the recommended configuration that this utility prints out.
2020-03-06Fix password hash file generation behaviorGalen Abell
- Move the "create password hash file from hashed password" behavior to a separate variable, since having it in the default field of config would always cause the warning to trigger - Change type of hashedPassword to `nullOr str`
2019-10-18Trigger restart of postfix if passwords of mail accounts changeMaximilian Bosch
2019-09-22Remove use of the deprecated string typeJosephTheEngineer
2019-09-16Delete leftover services.nixMartin Milata
2019-09-01fix: make surprising lmtp_save_to_detail_mailbox behaviour optionalRuben Maher
2019-08-13Merge branch 'metapensiero/nixos-mailserver-delimiter-master'Robin Raymond
2019-08-13Merge branch 'scintill/nixos-mailserver-dkim-bits'Robin Raymond
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-07 20:53:18 +0000