CrazyChaoz/NixOS-Configuration
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix jmap setup

Browse source
This commit is contained in:
Stefan Kempinger 2026-02-18 01:05:05 +01:00
parent 6ede343e56
commit 40642acf03
1 changed files with 26 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

46
heimserver/configuration.nix
View file

@ -102,14 +102,14 @@
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGHadFhDCUU/ta3p1FQgpm7NExHkyHNrJbNJP6np5w9 kempinger@ins.jku.at" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGHadFhDCUU/ta3p1FQgpm7NExHkyHNrJbNJP6np5w9 kempinger@ins.jku.at"
]; ];
}; };
users.users."stalwart-mail".extraGroups = [ users.users."stalwart-mail".extraGroups = [
"acme" "acme"
]; ];
users.users."nginx".extraGroups = [ users.users."nginx".extraGroups = [
"acme" "acme"
]; ];
users.users.immich.extraGroups = [ users.users.immich.extraGroups = [
"video" "video"
@ -206,17 +206,19 @@
virtualHosts."webadmin.kempinger.at" = { virtualHosts."webadmin.kempinger.at" = {
forceSSL = true; forceSSL = true;
useACMEHost = "webadmin.kempinger.at"; useACMEHost = "webadmin.kempinger.at";
#acmeRoot = null;
serverAliases = [ serverAliases = [
"mta-sts.kempinger.at" "mta-sts.kempinger.at"
"autoconfig.kempinger.at" "autoconfig.kempinger.at"
"autodiscover.kempinger.at" "autodiscover.kempinger.at"
"mail.kempinger.at"
"imap.kempinger.at" "imap.kempinger.at"
"mx1.kempinger.at" "mx1.kempinger.at"
"mail.kempinger.at"
]; ];
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:8090"; proxyPass = "http://127.0.0.1:8090";
};
locations."/jmap" = {
proxyPass = "http://127.0.0.1:8091/jmap";
}; };
}; };
virtualHosts.${config.services.forgejo.settings.server.DOMAIN} = { virtualHosts.${config.services.forgejo.settings.server.DOMAIN} = {
@ -842,7 +844,7 @@
openFirewall = true; openFirewall = true;
settings = { settings = {
server = { server = {
hostname = "mx1.kempinger.at"; hostname = "mail.kempinger.at";
tls = { tls = {
enable = true; enable = true;
implicit = true; implicit = true;
@ -858,12 +860,12 @@
tls.implicit = true; tls.implicit = true;
}; };
imaps = { imaps = {
bind = "[::]:993"; bind = "192.168.69.69:993";
protocol = "imap"; protocol = "imap";
tls.implicit = true; tls.implicit = true;
}; };
jmap = { jmap = {
bind = "0.0.0.0:8091"; bind = "127.0.0.1:8091";
url = "https://mail.kempinger.at"; url = "https://mail.kempinger.at";
protocol = "http"; protocol = "http";
}; };
@ -873,28 +875,32 @@
}; };
}; };
}; };
resolver.type = "custom"; resolver = {
resolver.custom = [ "udp://127.0.0.1:53" ]; type = "custom";
custom = [ "udp://127.0.0.1:53" ];
};
http.base-url = "'https://' + config_get('server.hostname')";
certificate."default" = { certificate."default" = {
cert = "%{file:${config.security.acme.certs."webadmin.kempinger.at".directory}/fullchain.pem}%"; cert = "%{file:${config.security.acme.certs."webadmin.kempinger.at".directory}/fullchain.pem}%";
private-key = "%{file:${config.security.acme.certs."webadmin.kempinger.at".directory}/key.pem}%"; private-key = "%{file:${config.security.acme.certs."webadmin.kempinger.at".directory}/key.pem}%";
}; };
lookup.default = { lookup.default = {
hostname = "mx1.kempinger.at"; hostname = "mail.kempinger.at";
domain = "kempinger.at"; domain = "kempinger.at";
}; };
session.rcpt.directory = "'internal'"; session.rcpt.directory = "'internal'";
directory."imap".lookup.domains = [ "kempinger.at" ]; directory."imap".lookup.domains = [ "kempinger.at" ];
# authentication.fallback-admin = { authentication.fallback-admin = {
# user = "admin"; user = "admin";
# secret = "bcrypt-hash"; secret = "$2b$10$f3gV764s.cE9Dqb0OW2SeOIO5eJdrBlTu/lDH7IlvFUYlUZF.CxXW";
# }; };
}; };
}; };
services.snowflake-proxy = { services.snowflake-proxy = {
enable = true; enable = true;
capacity = 50; capacity = 50;