jmap setup works now

This commit is contained in:
Stefan Kempinger 2026-02-18 12:51:44 +01:00
parent bd2d37d331
commit e3c816de84

View file

@ -206,18 +206,20 @@
virtualHosts."webadmin.kempinger.at" = { virtualHosts."webadmin.kempinger.at" = {
forceSSL = true; forceSSL = true;
useACMEHost = "webadmin.kempinger.at"; useACMEHost = "webadmin.kempinger.at";
#acmeRoot = null;
serverAliases = [ serverAliases = [
"mta-sts.kempinger.at" "mta-sts.kempinger.at"
"autoconfig.kempinger.at" "autoconfig.kempinger.at"
"autodiscover.kempinger.at" "autodiscover.kempinger.at"
"mail.kempinger.at"
"imap.kempinger.at" "imap.kempinger.at"
"mx1.kempinger.at" "mx1.kempinger.at"
"mail.kempinger.at"
]; ];
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:8090"; proxyPass = "http://127.0.0.1:8090";
}; };
locations."/jmap" = {
proxyPass = "http://127.0.0.1:8091/jmap";
};
}; };
virtualHosts.${config.services.forgejo.settings.server.DOMAIN} = { virtualHosts.${config.services.forgejo.settings.server.DOMAIN} = {
forceSSL = true; forceSSL = true;
@ -842,7 +844,7 @@
openFirewall = true; openFirewall = true;
settings = { settings = {
server = { server = {
hostname = "mx1.kempinger.at"; hostname = "mail.kempinger.at";
tls = { tls = {
enable = true; enable = true;
implicit = true; implicit = true;
@ -858,12 +860,12 @@
tls.implicit = true; tls.implicit = true;
}; };
imaps = { imaps = {
bind = "[::]:993"; bind = "192.168.69.69:993";
protocol = "imap"; protocol = "imap";
tls.implicit = true; tls.implicit = true;
}; };
jmap = { jmap = {
bind = "0.0.0.0:8091"; bind = "127.0.0.1:8091";
url = "https://mail.kempinger.at"; url = "https://mail.kempinger.at";
protocol = "http"; protocol = "http";
}; };
@ -873,8 +875,12 @@
}; };
}; };
}; };
resolver.type = "custom"; resolver = {
resolver.custom = [ "udp://127.0.0.1:53" ]; type = "custom";
custom = [ "udp://127.0.0.1:53" ];
};
http.base-url = "'https://' + config_get('server.hostname')";
certificate."default" = { certificate."default" = {
cert = "%{file:${config.security.acme.certs."webadmin.kempinger.at".directory}/fullchain.pem}%"; cert = "%{file:${config.security.acme.certs."webadmin.kempinger.at".directory}/fullchain.pem}%";
@ -882,7 +888,7 @@
}; };
lookup.default = { lookup.default = {
hostname = "mx1.kempinger.at"; hostname = "mail.kempinger.at";
domain = "kempinger.at"; domain = "kempinger.at";
}; };
@ -895,6 +901,11 @@
}; };
}; };
services.snowflake-proxy = {
enable = true;
capacity = 50;
};
nixpkgs.config.allowUnfree = true; nixpkgs.config.allowUnfree = true;
# nixpkgs.overlays = [ # nixpkgs.overlays = [