Commit Graph

858 Commits

Author SHA1 Message Date
Maximilian Bosch
8bddb1da20 nixos/postfix: rm MemoryDenyWriteExecute
This package has a direct dependency on pcre2. By removing the sealloc
allocator, which allows MemoryDenyWriteExecute, but is experimental and
not recommended for production, this option needs to be turned off
again.
2026-08-07 21:01:31 +02:00
Maximilian Bosch
bff0736024 nixos/dovecot: rm MemoryDenyWriteExecute
This package has a direct dependency on pcre2. By removing the sealloc
allocator, which allows MemoryDenyWriteExecute, but is experimental and
not recommended for production, this option needs to be turned off
again.
2026-08-07 21:01:31 +02:00
Maximilian Bosch
10f3e6999a nixos/cyrus-imap: rm MemoryDenyWriteExecute
This package has a direct dependency on pcre2. By removing the sealloc
allocator, which allows MemoryDenyWriteExecute, but is experimental and
not recommended for production, this option needs to be turned off
again.
2026-08-07 21:01:31 +02:00
Maximilian Bosch
d8002102fb nixos/roundcube: nginx config for max attachment size (#545577) 2026-07-31 23:17:45 +00:00
Arnout Engelen
e312d3c53c nixos/roundcube: nginx config for max attachment size
Fixes #506235

Not sure if I mistested this in #51304 or something changed
in the mean time. Moving it to `location./` is not sufficient.
2026-07-25 13:25:17 +02:00
Martin Weinelt
3758224be3 rspamd: try migrating to pcre2 again
The crashes happened in 2022 and now we are yanking pcre1, so we need to
try.
2026-07-23 21:09:36 +02:00
Aleksei Zolotov
5342f797d6 nixos/stalwart: Fix broken Stalwart documentation link in configuration 2026-07-18 13:08:37 +02:00
Martin Weinelt
9986a19f6c postsrsd: 2.0.11 -> 2.2.7
https://github.com/roehling/postsrsd/blob/2.2.7/CHANGELOG.rst
2026-07-12 01:29:41 +02:00
Martin Weinelt
f547405d88 nixos/postfix-tlspol: migrate to socket activation
Allows further confining the service. Socket activation is not supported
for the metrics-address.
2026-07-05 23:05:34 +02:00
Martin Weinelt
6108877b37 nixos/dovecot: place globals first in rendered config (#526068) 2026-06-27 09:19:05 +00:00
Nick Cao
ba9c52daaf nixos/maddy: allow string paths for secrets to support optional EnvironmentFiles (#532602) 2026-06-18 18:05:52 +00:00
Tim van Herpen
09ff9915ad nixos/maddy: allow string paths for secrets to support optional EnvironmentFiles 2026-06-17 10:21:15 +02:00
Jappie3
baf28478fc nixos/dovecot: order non-attrs values first in rendered config
Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2026-06-12 23:25:11 +02:00
euxane
4966604cc8 stalwart: remove euxane from maintainers 2026-06-09 07:14:37 +02:00
provokateurin
546e8cadac nixos/stalwart: Allow AF_UNIX address family for journal tracer 2026-05-29 15:59:39 +02:00
Alyssa Ross
9488f36f15 nixos/i18n: fix eval for non-glibc systems (e.g. musl) (#514825) 2026-05-18 09:42:55 +00:00
Maximilian Bosch
4ad7c2e156 roundcube: 1.6.15 -> 1.7.0 (#520143) 2026-05-16 13:54:56 +00:00
Maximilian Bosch
cfd61f84d3 nixos/roundcube: set nginx client_max_body_size for attachments (#513049) 2026-05-14 16:44:04 +00:00
Maximilian Bosch
3f732679b8 nixos/roundcube: use php 8.4 2026-05-14 18:25:21 +02:00
Maximilian Bosch
f449f1bac5 roundcube: 1.6.15 -> 1.7.0
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.7.0
2026-05-14 18:23:48 +02:00
Colin
cce4239d68 nixos/i18n: fix eval for non-glibc systems (e.g. musl)
`pkgs.glibcLocales` is null for musl systems, so
`options.i18n.glibcLocales` needs to also be nullable.
otherwise, the `.override` and subsequence path interpolations
fail for non-gnu systems.
2026-05-07 17:35:58 +00:00
Michael Daniels
2e87c2f8f4 nixos/*: remove unused let bindings
Generated using deadnix (with some manual work); split from #514611.
2026-05-01 20:39:14 -04:00
Ameer Taweel
988be666ac nixos/maddy: remove absolute path literals 2026-04-25 01:44:05 +03:00
Arnout Engelen
0afa9278be nixos/roundcube: set nginx client_max_body_size for attachments
Fixes #506235

This was attempted earlier in #506239 but AFAICT that
was the wrong place (nginx precedence rules are tricky).
2026-04-24 12:42:19 +02:00
ElnuDev
0f8dab97c9 roundcube: don't hard-code nginx user in service 2026-04-16 20:44:39 -07:00
Martin Weinelt
846674aeb2 nixos/dovecot: hotfix config defaults for sieve-less setups (#509558) 2026-04-13 23:06:27 +00:00
Katalin Rebhan
aea389e00d nixos/dovecot: define options for config and storage version
dovecot_config_version and dovecot_storage_version are accessed by
the module, so should at least have a default set so that assertions
eval correctly.
2026-04-13 21:41:44 +02:00
Katalin Rebhan
cf431ef62b nixos/dovecot: hotfix config defaults for sieve-less setups
The sieve_script_bin_path setting can only be set when the plugin is
loaded, so on sieve-less setups dovecot will refuse to start since
sieve_script_bin_path is an invalid setting. Don't set it there.
2026-04-13 15:26:45 +02:00
Martin Weinelt
0a609f30ca nixos/dovecot: add settings option (RFC42), redux (#500271) 2026-04-12 19:30:13 +00:00
Katalin Rebhan
400aecc29b nixos/dovecot: remove defaults for PAM and mail driver/path 2026-04-11 01:11:34 +02:00
Katalin Rebhan
8df2a9cbab nixos/dovecot: define module defaults as options 2026-04-11 01:11:34 +02:00
Jappie3
d49db5bd96 nixos/dovecot: add compatibility for Dovecot 2.4
Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2026-04-11 01:11:33 +02:00
Jappie3
ad56a1d988 nixos/dovecot: add settings option (RFC42)
Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2026-04-11 01:11:33 +02:00
Maximilian Bosch
eb77aa3ce2 nixos/roundcube: increase client_max_body_size for maxAttachmentSize (#506239) 2026-04-06 15:05:11 +00:00
Axel Karjalainen
28a9274f56 nixos/stalwart: document changing defaults to fix doc build 2026-04-04 20:04:50 +03:00
Axel Karjalainen
bfd7ffcf08 nixos/stalwart: switch logging from stdout to journal
journald's centralized logging has many advantages:
- External centralized logging can simply source from journald
- journald's auto-vacuum options (e.g. SystemMaxUse) can make sure logs
  don't take up too much space
- Logs are in a single timeline, which is useful for analysis
2026-04-04 20:04:10 +03:00
Axel Karjalainen
75742d265e nixos/stalwart: add module-specific stateVersion and clean up 2026-04-04 20:02:21 +03:00
Luna Simons
d965362c0d nixos/roundcube: increase client_max_body_size for maxAttachmentSize 2026-04-03 10:22:59 +02:00
Martin Weinelt
77bf0b01d0 nixos/tlsrpt: reuse sender address as envelope sender
This prevents leaking the local user and hostname into the envelope,
which could prevent DKIM signing due to lack of keys for the MX hostname.
2026-03-07 16:11:59 +01:00
Sandro
5a38d3c050 opensmtpd: fix offline enqueueing (#491938) 2026-03-01 03:42:39 +00:00
Peter Simons
4f63959d17 nixos/rspamd: Add extraArgs option to rspamd module (#484133) 2026-02-25 20:39:32 +00:00
Roman Stein
39105a7501 nixos/rspamd: Add extraArgs option to rspamd module
Add extraArgs option to pass additional command-line arguments to rspamd, allowing variables to be defined for use in UCL configuration files.
2026-02-25 21:26:07 +01:00
Maximilian Bosch
593e2fe858 nixos/roundcube: fix missing pspell dictionaries during setup (#478198) 2026-02-21 13:31:19 +00:00
Ricardo Correia
89223af8fe opensmtpd: fix offline enqueueing
Note: for it to work correctly, it requires `services.opensmtpd.setSendmail` is
set to true.

Fixes #255691

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2026-02-19 12:51:11 +00:00
Darren Rambaud
12c3b561df nixos/stalwart: add guards
* if `cfg.user` or `cfg.group` are set, can safely assume operator will
  take care of creating the user/group
* add fallback guard for `SyslogIdentifier`

Related to:
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2751960797
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2751961935
2026-02-01 16:46:01 -06:00
Darren Rambaud
6cd9ce753d nixos/stalwart: add fallback to /var/cache/stalwart-mail
* update test to account for fallback
2026-01-28 23:51:51 -06:00
Darren Rambaud
7457ecf7bb nixos/stalwart: improve code
* address review comments:
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2719419333
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2719421199
2026-01-28 23:51:50 -06:00
Darren Rambaud
7d08d5257b nixos/stalwart: update setting description
* address review comment:
 https://github.com/NixOS/nixpkgs/pull/481815/files#r2706718725
2026-01-28 23:51:48 -06:00
Darren Rambaud
9dc7450f47 stalwart: remove refs to stalwart-mail
* re-name systemd service
* update test
2026-01-28 23:51:47 -06:00
Darren Rambaud
f80dce8801 module/stalwart: add guards against data loss
* if `stateVersion` < 26.05, will fallback to previous defaults
* add new options to configure `user:group` ownership of service
* address review comments:
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710218047
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710223058
2026-01-28 23:51:45 -06:00