Just forget domain-specefic FFS
This commit is contained in:
parent
409d0e6207
commit
e3e6305647
14
dkim.nix
14
dkim.nix
@ -88,7 +88,7 @@ in {
|
|||||||
|
|
||||||
services.opendkim = {
|
services.opendkim = {
|
||||||
enable = true;
|
enable = true;
|
||||||
# selector = cfg.selector;
|
selector = cfg.selector;
|
||||||
domains = let domainString = concatStringsSep "," cfg.domains;
|
domains = let domainString = concatStringsSep "," cfg.domains;
|
||||||
in "csl:${domainString}";
|
in "csl:${domainString}";
|
||||||
configFile = let
|
configFile = let
|
||||||
@ -100,8 +100,8 @@ in {
|
|||||||
in pkgs.writeText "opendkim.conf" ''
|
in pkgs.writeText "opendkim.conf" ''
|
||||||
Canonicalization relaxed/simple
|
Canonicalization relaxed/simple
|
||||||
Socket inet:${toString cfg.port}
|
Socket inet:${toString cfg.port}
|
||||||
KeyTable file:${keyTableDir}/key.table
|
# KeyTable file:${keyTableDir}/key.table
|
||||||
SigningTable file:${signingTableDir}/signing.table
|
# SigningTable file:${signingTableDir}/signing.table
|
||||||
${optionalString cfg.debug debugString}
|
${optionalString cfg.debug debugString}
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
@ -114,10 +114,10 @@ in {
|
|||||||
services.opendkim = {
|
services.opendkim = {
|
||||||
path = with pkgs; [ opendkim ];
|
path = with pkgs; [ opendkim ];
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
ExecStartPre = [
|
# ExecStartPre = [
|
||||||
(pkgs.writeShellScript "ensure-dkim-certs.sh"
|
# (pkgs.writeShellScript "ensure-dkim-certs.sh"
|
||||||
(ensureAllDkimCerts cfg.state-directory cfg.domains))
|
# (ensureAllDkimCerts cfg.state-directory cfg.domains))
|
||||||
];
|
# ];
|
||||||
ReadWritePaths = [ cfg.state-directory ];
|
ReadWritePaths = [ cfg.state-directory ];
|
||||||
ReadOnlyPaths = [ keyTableDir signingTableDir ];
|
ReadOnlyPaths = [ keyTableDir signingTableDir ];
|
||||||
};
|
};
|
||||||
|
Loading…
x
Reference in New Issue
Block a user