public
/
mail-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Oops, shouldn't be nested under systemd

This commit is contained in:
niten 2023-10-01 14:54:08 -07:00
parent 2a46e1bfe3
commit 23e76da29e
1 changed files with 42 additions and 42 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

84
dovecot.nix
View File

@ -207,48 +207,6 @@ in {
after = [ "dovecot2.service" ]; after = [ "dovecot2.service" ];
}; };
sssd = {
enable = true;
environmentFile = "/run/dovecotSecrets/sssd.env";
config = ''
[nss]
filter_users = root
filter_groups = root
reconnection_retries = 3
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
domains = informis.land
services = nss, pam
[pam]
reconnection_retries = 3
[domain/informis.land]
cache_credentials = False
id_provider = ldap
auth_provider = ldap
access_provider = ldap
chpass_provider = ldap
ldap_uri = SSSD_LDAP_SERVER
ldap_schema = rfc2307bis
ldap_search_base = SSSD_LDAP_SEARCH_BASE
ldap_user_search_base = SSSD_LDAP_USER_SEARCH_BASE
ldap_group_search_base = SSSD_LDAP_GROUP_SEARCH_BASE
ldap_user_object_class = user
ldap_user_name = cn
ldap_group_object_class = group
ldap_group_name = cn
ldap_default_bind_fn = SSSD_LDAP_BIND_DN
ldap_default_authtok = SSSD_LDAP_AUTH_TOKEN
'';
};
dovecot-sieve-generator = let dovecot-sieve-generator = let
isRegularFile = _: type: type == "regular"; isRegularFile = _: type: type == "regular";
sieves = filterAttrs isRegularFile (builtins.readDir ./sieves); sieves = filterAttrs isRegularFile (builtins.readDir ./sieves);
@ -302,6 +260,48 @@ in {
socketPath = "/var/run/dovecot2/old-stats"; socketPath = "/var/run/dovecot2/old-stats";
}; };
sssd = {
enable = true;
environmentFile = "/run/dovecotSecrets/sssd.env";
config = ''
[nss]
filter_users = root
filter_groups = root
reconnection_retries = 3
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
domains = informis.land
services = nss, pam
[pam]
reconnection_retries = 3
[domain/informis.land]
cache_credentials = False
id_provider = ldap
auth_provider = ldap
access_provider = ldap
chpass_provider = ldap
ldap_uri = SSSD_LDAP_SERVER
ldap_schema = rfc2307bis
ldap_search_base = SSSD_LDAP_SEARCH_BASE
ldap_user_search_base = SSSD_LDAP_USER_SEARCH_BASE
ldap_group_search_base = SSSD_LDAP_GROUP_SEARCH_BASE
ldap_user_object_class = user
ldap_user_name = cn
ldap_group_object_class = group
ldap_group_name = cn
ldap_default_bind_fn = SSSD_LDAP_BIND_DN
ldap_default_authtok = SSSD_LDAP_AUTH_TOKEN
'';
};
dovecot2 = { dovecot2 = {
enable = true; enable = true;
enableImap = true; enableImap = true;