Commit graph

693 commits

Author SHA1 Message Date
Oliver Schmidt 047a804449 nixos/postsrsd: expose socketPath via module option
Services utilising postsrsd need to connect to it via a Unix socket.
While the path to that socket is static as of now, the discoverability
of that path suffers from the lack of module documentation and a
scattered definition of the individual path components over at least
three lines, even when reading the module source.

By exposing the socket path as a readOnly NixOS option, that value shows
up in the options overview and can be re-used in other parts of NixOS
config.
2025-05-12 09:51:17 +02:00
Alyssa Ross afdbf499ac nixos/mailman: hyperkitty needs mailman-web-setup
qcluster won't be happy if it's started before the database migrations
have been run.

	12:25:47 [Q] ERROR Failed to pull task from broker
	Traceback (most recent call last):
	  File "/nix/store/w5ndmidmkiy02vvgl7cxx1fkzc1pichg-python3-3.12.9-env/lib/python3.12/site-packages/django/db/backends/utils.py", line 89, in _execute
	    return self.cursor.execute(sql, params)
	           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	  File "/nix/store/w5ndmidmkiy02vvgl7cxx1fkzc1pichg-python3-3.12.9-env/lib/python3.12/site-packages/django/db/backends/sqlite3/base.py", line 328, in execute
	    return super().execute(query, params)
	           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	sqlite3.OperationalError: no such table: django_q_ormq
2025-05-05 20:06:00 +02:00
Jeremy Fleischman d1e920fc37
services/postsrsd: updates for postsrsd 2
postsrsd 2 expects a config file, and has some breaking changes that
make it incompatible with some of our old options.
2025-04-28 17:37:16 +02:00
Patrick Steinhardt feddb6a2bc opensmtpd-extras: drop in favor of standalone tables
Upstream has archived the OpenSMTPD-extras repository with 82c49af (add
deprecation notice, 2024-10-22). Instead, it has created a set of
repositories, each containing one of the tables. The old tables aren't
compatible anymore with recent OpenSMTPD versions due to changed
protocols. Other extras, like the queues, don't have an alternative to
the best of my knowledge.

Furthermore, opensmtpd-extras doesn't even build anymore, furthermore
indicating that there aren't any users of this package. Remove the
"opensmtpd-extras" package and raise errors pointing to the new
standalone tables.

Add a release note.
2025-04-28 13:26:53 +02:00
Patrick Steinhardt 132c73dd29 nixos/opensmtpd: adapt to changed filter location
The location of filters for OpenSMTPD has been changed to
"libexec/smtpd". Adapt the service accordingly.
2025-04-28 13:26:53 +02:00
Felix Bühler 7b3170d6b2
nixos/maddy: add package option (#396535) 2025-04-22 23:21:17 +02:00
Nick Cao 5051c4651e
nxios/cyrus-imap: fix cyrus-imap certs options (#392716) 2025-04-07 20:01:10 -04:00
Nguyễn Gia Phong baf2d3e27f
nixos/maddy: add package option 2025-04-06 20:20:18 +09:00
Silvan Mosberger 374e6bcc40 treewide: Format all Nix files
Format all Nix files using the officially approved formatter,
making the CI check introduced in the previous commit succeed:

  nix-build ci -A fmt.check

This is the next step of the of the [implementation](https://github.com/NixOS/nixfmt/issues/153)
of the accepted [RFC 166](https://github.com/NixOS/rfcs/pull/166).

This commit will lead to merge conflicts for a number of PRs,
up to an estimated ~1100 (~33%) among the PRs with activity in the past 2
months, but that should be lower than what it would be without the previous
[partial treewide format](https://github.com/NixOS/nixpkgs/pull/322537).

Merge conflicts caused by this commit can now automatically be resolved while rebasing using the
[auto-rebase script](8616af08d9/maintainers/scripts/auto-rebase).

If you run into any problems regarding any of this, please reach out to the
[formatting team](https://nixos.org/community/teams/formatting/) by
pinging @NixOS/nix-formatting.
2025-04-01 20:10:43 +02:00
Moraxyc 128bdeb3c5
nxios/cyrus-imap: fix cyrus-imap certs options 2025-03-24 21:57:25 +08:00
h7x4 ab0564bd10
treewide: add documentation for nixos systemd units 2025-03-12 18:00:38 +01:00
Izorkin 6f9f983368 dovecot: remove option modules 2025-03-11 10:17:21 +03:00
Izorkin a6a9bb9725 dovecot: remove hard coding path to module dir 2025-03-06 19:47:04 +03:00
shelvacu 1a4575f9db
nixos/modules: Add security.pki.caBundle option and make all services use it for CA bundles (#352244)
Previously some modules used `config.environment.etc."ssl/certs/ca-certificates.crt".source`, some used `"/etc/ssl/certs/ca-certificates.crt"`, and some used `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"`. These were all bad in one way or another:

- `config.environment.etc."ssl/certs/ca-certificates.crt".source` relies on `source` being set; if `text` is set instead this breaks, introducing a weird undocumented requirement
- `"/etc/ssl/certs/ca-certificates.crt"` is probably okay but very un-nix. It's a magic string, and the path doesn't change when the file changes (and so you can't trigger service reloads, for example, when the contents change in a new system activation)
- `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"` silently doesn't include the options from `security.pki`

Co-authored-by: Shelvacu <git@shelvacu.com>
2025-03-08 08:41:08 +00:00
Kamillaova a1226737a4
nixos/postfixadmin: use config.services.postgresql.settings.port instead of old ...postgresql.port 2025-03-01 15:09:35 +03:00
Kamillaova bab7f1e99e
nixos/postfixadmin: add set -o pipefail for postfixadmin-postgres script 2025-03-01 15:09:34 +03:00
Kamillaova 2de264f209
nixos/postfixadmin: refactor 2025-03-01 15:09:13 +03:00
Kamillaova c0c3fa6a78
nixos/postfixadmin: format with nixfmt-rfc-style 2025-03-01 15:08:14 +03:00
Maximilian Bosch 303bd80713
Merge: nixos/nginx: add locations."name".uwsgiPass option and use it (#346776) 2025-03-01 12:34:20 +01:00
Ilan Joselevich ddef0335cb
nixos/stalwart-mail: support adding secrets (#380588) 2025-02-23 16:00:01 +07:00
Martin Milata 8fa9a9bf44 sympa: remove mmilata from maintainers 2025-02-12 18:37:16 +01:00
Jonas Heinrich f6f3d482cb nixos/stalwart-mail: support adding secrets 2025-02-10 11:50:32 +01:00
Alexander Sieg c9f9155575
nixos/stalwart-mail: add spam-filter.resource setting 2025-02-06 10:20:22 +01:00
Peder Bergebakken Sundt 953f72e76e nixos/*: tag manpage references 2025-01-27 02:47:01 +01:00
Julien Moutinho 69b606d103 nixos/public-inbox: enable confinement 2025-01-26 15:06:05 +01:00
Alyssa Ross e1996d7bda nixos/public-inbox: bind key and cert paths
Otherwise, these can't be accessed by the service.
2025-01-21 13:51:11 +01:00
piegames 603733851b treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
Artturin 8cf119c7a1 nixos/stalwart-mail: Fix creation of dataDir if not default
Without these I got

`mkdir: cannot create directory ‘/data/stalwart’: Read-only file system`
2024-12-27 05:02:32 +02:00
Artturin b19b16be96 nixos/stalwart-mail: Add dataDir option
I want to move it elsewhere.
2024-12-26 18:26:25 +02:00
Léo Gaspard 69a8aba113 nixos/opensmtpd: run nixfmt as requested by ci 2024-12-26 12:38:59 +01:00
Léo Gaspard fb4ff06a4b fix opensmtpd's sendmail, add relevant test 2024-12-26 12:38:59 +01:00
Lorenz Leutgeb 578baae41d nixos/mailman: Remove unused extraPythonPackages 2024-12-22 16:22:32 +01:00
euxane 1dabc1f584 maintainers: rename pacien -> euxane, update details 2024-12-21 21:20:22 +01:00
lassulus 197794787c
nixos/mailhog: add setSendmail option (#339283) 2024-12-17 21:37:08 +01:00
Sandro Jäckel d1a28bbdb4
nixos/nginx: add locations."name".uwsgiPass and related options and use it 2024-12-11 01:07:02 +01:00
Silvan Mosberger 4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build a08b3a4d19.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
Yureka 4d8e8de0d9 nixos/mailman: increase uwsgi buffer size
otherwise results in 502 bad gateway errors with some clients (which send a lot of cookies?)

Change-Id: I9aadedb7acde0388f060dbb82ccd8788f41ff0e6
2024-12-08 10:36:18 +01:00
Arne Keller 91f2c5f2a2
nixos/postfix: add missing mkDefault for smtpd tls config (#343805) 2024-12-06 11:17:40 +01:00
Sandro 1d62a85ff5
nixos/mailman: add option to expand the uwsgi settings (#333315) 2024-11-29 00:53:55 +01:00
Sandro 1af52db201
nixos/mailman: wrap mailman cli to start as mailman user (#332847) 2024-11-27 23:07:31 +01:00
Sandro Jäckel 61d15c60fc
nixos/mailman: add option to expand the uwsgi settings 2024-11-27 23:02:47 +01:00
Sandro 8bc2cc19bb
nixos/opendkim: modernize, add expandable settings option, put config file under standard location (#333758) 2024-11-19 22:29:49 +01:00
Silvan Mosberger 555f0e9f1e
formats.ini: expose INI atom from all ini formats (#354800) 2024-11-18 16:11:51 +01:00
Johannes Kirschbauer 6b53949b0c
formats.ini: expose INI atom from all ini formats 2024-11-18 16:07:22 +01:00
Sandro Jäckel f497159195
nixos/opendkim: put config file under standard location 2024-11-17 22:27:10 +01:00
Sandro Jäckel 1414b222f5
nixos/opendkim: add expandable settings option 2024-11-17 22:27:09 +01:00
Sandro Jäckel dfac70cb1d
nixos/opendkim: modernize 2024-11-17 22:27:09 +01:00
Pol Dellaiera e92d5eb308
nixos/protonmail-bridge: fix typo (#355520) 2024-11-13 07:56:04 +01:00
ginkogruen aa79218b2c
nixos/protonmail-bridge: fix typo
protonmail-bride's --> protonmail-bridge's
2024-11-12 21:55:34 +01:00
h7x4 97ca8ccb15
nixos/roundcube: add example for database.passwordFile (#348166) 2024-11-11 08:27:50 +01:00