public
/
mail-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

rspam needs SYS_ADMIN to use DynamicUser

This commit is contained in:
niten 2023-09-24 12:19:13 -07:00
parent 1730fc8bd5
commit 39482d7ee1
3 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
dovecot.nix
View File

@ -2,6 +2,8 @@
with lib; with lib;
let let
cfg = config.fudo.mail.dovecot;
sievePath = let sievePath = let
isRegularFile = _: type: type == "regular"; isRegularFile = _: type: type == "regular";
sieves = filter isRegularFile (builtins.readDir ./sieves); sieves = filter isRegularFile (builtins.readDir ./sieves);

1
mail-server.nix
View File

@ -342,6 +342,7 @@ in {
]; ];
user = mkUserMap "mailserver-antivirus"; user = mkUserMap "mailserver-antivirus";
volumes = [ "${cfg.state-directory}/antivirus:/state" ]; volumes = [ "${cfg.state-directory}/antivirus:/state" ];
capabilities.SYS_ADMIN = true;
}; };
nixos = { nixos = {
useSystemd = true; useSystemd = true;

10
rspamd.nix
View File

@ -63,11 +63,11 @@ in {
} }
''; '';
"rbl.conf".text = '' # "rbl.conf".text = ''
rbls { # rbls {
an_rbl # an_rbl
} # }
''; # '';
}; };
overrides."milter_headers.conf".text = "extended_spam_headers = true;"; overrides."milter_headers.conf".text = "extended_spam_headers = true;";