dba1d48b78
to use it through config.ids.{uids,gids} rather than `import
relative-path/ids.nix'.
svn path=/nixos/branches/modular-nixos/; revision=15796
145 lines
2.8 KiB
Nix
145 lines
2.8 KiB
Nix
{pkgs, config, ...}:
|
|
|
|
###### interface
|
|
let
|
|
inherit (pkgs.lib) mkOption mkIf;
|
|
|
|
options = {
|
|
services = {
|
|
dovecot = {
|
|
enable = mkOption {
|
|
default = false;
|
|
description = "Whether to enable dovecot POP3/IMAP server.";
|
|
};
|
|
|
|
user = mkOption {
|
|
default = "dovecot";
|
|
description = "dovecot user name";
|
|
};
|
|
group = mkOption {
|
|
default = "dovecot";
|
|
description = "dovecot group name";
|
|
};
|
|
|
|
sslServerCert = mkOption {
|
|
default = "";
|
|
description = "Server certificate";
|
|
};
|
|
sslCACert = mkOption {
|
|
default = "";
|
|
description = "CA certificate used by server certificate";
|
|
};
|
|
sslServerKey = mkOption {
|
|
default = "";
|
|
description = "Server key";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
in
|
|
|
|
###### implementation
|
|
|
|
let
|
|
startingDependency = if config.services.gw6c.enable then "gw6c" else "network-interfaces";
|
|
|
|
cfg = config.services.dovecot;
|
|
|
|
dovecotConf =
|
|
''
|
|
base_dir = /var/run/dovecot/
|
|
|
|
protocols = imap imaps pop3 pop3s
|
|
''
|
|
+ (if cfg.sslServerCert!="" then
|
|
''
|
|
ssl_cert_file = ${cfg.sslServerCert}
|
|
ssl_key_file = ${cfg.sslServerKey}
|
|
ssl_ca_file = ${cfg.sslCACert}
|
|
'' else ''
|
|
ssl_disable = yes
|
|
disable_plaintext_auth = no
|
|
'')
|
|
|
|
|
|
+ ''
|
|
login_user = ${cfg.user}
|
|
login_chroot = no
|
|
|
|
mail_location = maildir:/var/spool/mail/%u
|
|
|
|
maildir_copy_with_hardlinks = yes
|
|
|
|
auth default {
|
|
mechanisms = plain login
|
|
userdb passwd {
|
|
}
|
|
passdb pam {
|
|
}
|
|
user = root
|
|
}
|
|
auth_debug = yes
|
|
auth_verbose = yes
|
|
|
|
pop3_uidl_format = %08Xv%08Xu
|
|
|
|
log_path = /var/log/dovecot.log
|
|
''
|
|
;
|
|
confFile = pkgs.writeText "dovecot.conf" dovecotConf;
|
|
|
|
pamdFile = pkgs.writeText "dovecot.pam" ''
|
|
auth include common
|
|
account include common
|
|
'';
|
|
|
|
in
|
|
|
|
mkIf config.services.dovecot.enable {
|
|
|
|
require = [
|
|
options
|
|
];
|
|
|
|
environment = {
|
|
etc = [{
|
|
source = pamdFile;
|
|
target = "pam.d/dovecot";
|
|
}];
|
|
};
|
|
|
|
users = {
|
|
extraUsers = [{
|
|
name = cfg.user;
|
|
uid = config.ids.uids.dovecot;
|
|
description = "Dovecot user";
|
|
group = cfg.group;
|
|
}];
|
|
extraGroups = [{
|
|
name = cfg.group;
|
|
gid = config.ids.gids.dovecot;
|
|
}];
|
|
};
|
|
|
|
services = {
|
|
extraJobs = [{
|
|
name = "dovecot";
|
|
|
|
job = ''
|
|
description "Dovecot IMAP/POP3 server"
|
|
|
|
start on ${startingDependency}/started
|
|
stop on never
|
|
|
|
start script
|
|
${pkgs.coreutils}/bin/mkdir -p /var/run/dovecot /var/run/dovecot/login
|
|
${pkgs.coreutils}/bin/chown -R ${cfg.user}.${cfg.group} /var/run/dovecot
|
|
end script
|
|
|
|
respawn ${pkgs.dovecot}/sbin/dovecot -F -c ${confFile}
|
|
'';
|
|
|
|
}];
|
|
};
|
|
}
|