Commit graph

6 commits

Author SHA1 Message Date
Martin Weinelt e030814446
nixos/tlsrpt: configure explicit http_script
Make sure we get curl into the system, since when the tlsrpt rua is an
HTTP URL we need to be able to deliver to that.
2025-07-29 06:16:36 +02:00
Martin Weinelt b438f32b2a
nixos/tlsrpt: fix permissions to execute postdrop
Calling to sendmail without AF_NETLINK causes:

> sendmail: fatal: inet_addr_local[getifaddrs]: getifaddrs: Address family not supported by protocol

and without AF_INET/AF_INET6:

> sendmail: warning: inet_protocols: disabling IPv6 name/address support: Address family not supported by protocol
> sendmail: warning: inet_protocols: disabling IPv4 name/address support: Address family not supported by protocol

Move the configurePostfix option one level up, since it now also
reconfigures the reportd systemd unit.
2025-07-28 15:06:25 +02:00
Martin Weinelt c3c5a3bfd0
nixos/tlsrpt: fix restart trigger
Triggering on a symlink target does not work.
2025-07-28 15:06:25 +02:00
Martin Weinelt 1f9431801f
nixos/tlsrpt: fix default postfix sendmail path
It is not in the PATH for the reportd, since it is a SUID wrapper.
2025-07-28 15:06:24 +02:00
Martin Weinelt e48d12554c
nixos/tlsrpt: fix permissions for postfix
Same as with other services giving postfix access, this needs to happen
for the postfix user. Adding supplementary group permissions to the
systemd unit does not propagate to child processes that ultimately call
the unix domain socket.
2025-07-24 02:29:54 +02:00
Martin Weinelt 863d3a151d
nixos/tlsrpt: init 2025-06-16 06:02:10 +02:00