From 8b2845a1b2041d2fc86e12c654497e48eeccf7d2 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Sun, 24 Sep 2023 23:13:58 -0700
Subject: [PATCH] Add trusted-networks option

---
 mail-server.nix | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/mail-server.nix b/mail-server.nix
index d98475f..ca0fbc8 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -41,12 +41,18 @@ in {
       default = [ ];
     };
 
-    metricsPort = mkOption {
+    metrics-port = mkOption {
       type = port;
       description = "Port on which to serve metrics.";
       default = metricsPort;
     };
 
+    trusted-networks = mkOption {
+      type = listOf str;
+      description = "List of networks to be considered trusted.";
+      default = [ ];
+    };
+
     ldap = {
       authentik-host = mkOption {
         type = str;
@@ -401,7 +407,7 @@ in {
           metrics-proxy = {
             service = {
               networks = [ "internal_network" ];
-              ports = [ "${toString cfg.metricsPort}:80" ];
+              ports = [ "${toString cfg.metrics-port}:80" ];
             };
             nixos = {
               useSystemd = true;