Maximilian Bosch
8bddb1da20
nixos/postfix: rm MemoryDenyWriteExecute
...
This package has a direct dependency on pcre2. By removing the sealloc
allocator, which allows MemoryDenyWriteExecute, but is experimental and
not recommended for production, this option needs to be turned off
again.
2026-08-07 21:01:31 +02:00
Maximilian Bosch
bff0736024
nixos/dovecot: rm MemoryDenyWriteExecute
...
This package has a direct dependency on pcre2. By removing the sealloc
allocator, which allows MemoryDenyWriteExecute, but is experimental and
not recommended for production, this option needs to be turned off
again.
2026-08-07 21:01:31 +02:00
Maximilian Bosch
10f3e6999a
nixos/cyrus-imap: rm MemoryDenyWriteExecute
...
This package has a direct dependency on pcre2. By removing the sealloc
allocator, which allows MemoryDenyWriteExecute, but is experimental and
not recommended for production, this option needs to be turned off
again.
2026-08-07 21:01:31 +02:00
Maximilian Bosch
d8002102fb
nixos/roundcube: nginx config for max attachment size ( #545577 )
2026-07-31 23:17:45 +00:00
Arnout Engelen
e312d3c53c
nixos/roundcube: nginx config for max attachment size
...
Fixes #506235
Not sure if I mistested this in #51304 or something changed
in the mean time. Moving it to `location./` is not sufficient.
2026-07-25 13:25:17 +02:00
Martin Weinelt
3758224be3
rspamd: try migrating to pcre2 again
...
The crashes happened in 2022 and now we are yanking pcre1, so we need to
try.
2026-07-23 21:09:36 +02:00
Aleksei Zolotov
5342f797d6
nixos/stalwart: Fix broken Stalwart documentation link in configuration
2026-07-18 13:08:37 +02:00
Martin Weinelt
9986a19f6c
postsrsd: 2.0.11 -> 2.2.7
...
https://github.com/roehling/postsrsd/blob/2.2.7/CHANGELOG.rst
2026-07-12 01:29:41 +02:00
Martin Weinelt
f547405d88
nixos/postfix-tlspol: migrate to socket activation
...
Allows further confining the service. Socket activation is not supported
for the metrics-address.
2026-07-05 23:05:34 +02:00
Martin Weinelt
6108877b37
nixos/dovecot: place globals first in rendered config ( #526068 )
2026-06-27 09:19:05 +00:00
Nick Cao
ba9c52daaf
nixos/maddy: allow string paths for secrets to support optional EnvironmentFiles ( #532602 )
2026-06-18 18:05:52 +00:00
Tim van Herpen
09ff9915ad
nixos/maddy: allow string paths for secrets to support optional EnvironmentFiles
2026-06-17 10:21:15 +02:00
Jappie3
baf28478fc
nixos/dovecot: order non-attrs values first in rendered config
...
Co-authored-by: Katalin Rebhan <me@dblsaiko.net >
2026-06-12 23:25:11 +02:00
euxane
4966604cc8
stalwart: remove euxane from maintainers
2026-06-09 07:14:37 +02:00
provokateurin
546e8cadac
nixos/stalwart: Allow AF_UNIX address family for journal tracer
2026-05-29 15:59:39 +02:00
Alyssa Ross
9488f36f15
nixos/i18n: fix eval for non-glibc systems (e.g. musl) ( #514825 )
2026-05-18 09:42:55 +00:00
Maximilian Bosch
4ad7c2e156
roundcube: 1.6.15 -> 1.7.0 ( #520143 )
2026-05-16 13:54:56 +00:00
Maximilian Bosch
cfd61f84d3
nixos/roundcube: set nginx client_max_body_size for attachments ( #513049 )
2026-05-14 16:44:04 +00:00
Maximilian Bosch
3f732679b8
nixos/roundcube: use php 8.4
2026-05-14 18:25:21 +02:00
Maximilian Bosch
f449f1bac5
roundcube: 1.6.15 -> 1.7.0
...
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.7.0
2026-05-14 18:23:48 +02:00
Colin
cce4239d68
nixos/i18n: fix eval for non-glibc systems (e.g. musl)
...
`pkgs.glibcLocales` is null for musl systems, so
`options.i18n.glibcLocales` needs to also be nullable.
otherwise, the `.override` and subsequence path interpolations
fail for non-gnu systems.
2026-05-07 17:35:58 +00:00
Michael Daniels
2e87c2f8f4
nixos/*: remove unused let bindings
...
Generated using deadnix (with some manual work); split from #514611 .
2026-05-01 20:39:14 -04:00
Ameer Taweel
988be666ac
nixos/maddy: remove absolute path literals
2026-04-25 01:44:05 +03:00
Arnout Engelen
0afa9278be
nixos/roundcube: set nginx client_max_body_size for attachments
...
Fixes #506235
This was attempted earlier in #506239 but AFAICT that
was the wrong place (nginx precedence rules are tricky).
2026-04-24 12:42:19 +02:00
ElnuDev
0f8dab97c9
roundcube: don't hard-code nginx user in service
2026-04-16 20:44:39 -07:00
Martin Weinelt
846674aeb2
nixos/dovecot: hotfix config defaults for sieve-less setups ( #509558 )
2026-04-13 23:06:27 +00:00
Katalin Rebhan
aea389e00d
nixos/dovecot: define options for config and storage version
...
dovecot_config_version and dovecot_storage_version are accessed by
the module, so should at least have a default set so that assertions
eval correctly.
2026-04-13 21:41:44 +02:00
Katalin Rebhan
cf431ef62b
nixos/dovecot: hotfix config defaults for sieve-less setups
...
The sieve_script_bin_path setting can only be set when the plugin is
loaded, so on sieve-less setups dovecot will refuse to start since
sieve_script_bin_path is an invalid setting. Don't set it there.
2026-04-13 15:26:45 +02:00
Martin Weinelt
0a609f30ca
nixos/dovecot: add settings option (RFC42), redux ( #500271 )
2026-04-12 19:30:13 +00:00
Katalin Rebhan
400aecc29b
nixos/dovecot: remove defaults for PAM and mail driver/path
2026-04-11 01:11:34 +02:00
Katalin Rebhan
8df2a9cbab
nixos/dovecot: define module defaults as options
2026-04-11 01:11:34 +02:00
Jappie3
d49db5bd96
nixos/dovecot: add compatibility for Dovecot 2.4
...
Co-authored-by: Katalin Rebhan <me@dblsaiko.net >
2026-04-11 01:11:33 +02:00
Jappie3
ad56a1d988
nixos/dovecot: add settings option (RFC42)
...
Co-authored-by: Katalin Rebhan <me@dblsaiko.net >
2026-04-11 01:11:33 +02:00
Maximilian Bosch
eb77aa3ce2
nixos/roundcube: increase client_max_body_size for maxAttachmentSize ( #506239 )
2026-04-06 15:05:11 +00:00
Axel Karjalainen
28a9274f56
nixos/stalwart: document changing defaults to fix doc build
2026-04-04 20:04:50 +03:00
Axel Karjalainen
bfd7ffcf08
nixos/stalwart: switch logging from stdout to journal
...
journald's centralized logging has many advantages:
- External centralized logging can simply source from journald
- journald's auto-vacuum options (e.g. SystemMaxUse) can make sure logs
don't take up too much space
- Logs are in a single timeline, which is useful for analysis
2026-04-04 20:04:10 +03:00
Axel Karjalainen
75742d265e
nixos/stalwart: add module-specific stateVersion and clean up
2026-04-04 20:02:21 +03:00
Luna Simons
d965362c0d
nixos/roundcube: increase client_max_body_size for maxAttachmentSize
2026-04-03 10:22:59 +02:00
Martin Weinelt
77bf0b01d0
nixos/tlsrpt: reuse sender address as envelope sender
...
This prevents leaking the local user and hostname into the envelope,
which could prevent DKIM signing due to lack of keys for the MX hostname.
2026-03-07 16:11:59 +01:00
Sandro
5a38d3c050
opensmtpd: fix offline enqueueing ( #491938 )
2026-03-01 03:42:39 +00:00
Peter Simons
4f63959d17
nixos/rspamd: Add extraArgs option to rspamd module ( #484133 )
2026-02-25 20:39:32 +00:00
Roman Stein
39105a7501
nixos/rspamd: Add extraArgs option to rspamd module
...
Add extraArgs option to pass additional command-line arguments to rspamd, allowing variables to be defined for use in UCL configuration files.
2026-02-25 21:26:07 +01:00
Maximilian Bosch
593e2fe858
nixos/roundcube: fix missing pspell dictionaries during setup ( #478198 )
2026-02-21 13:31:19 +00:00
Ricardo Correia
89223af8fe
opensmtpd: fix offline enqueueing
...
Note: for it to work correctly, it requires `services.opensmtpd.setSendmail` is
set to true.
Fixes #255691
Co-authored-by: Sandro <sandro.jaeckel@gmail.com >
2026-02-19 12:51:11 +00:00
Darren Rambaud
12c3b561df
nixos/stalwart: add guards
...
* if `cfg.user` or `cfg.group` are set, can safely assume operator will
take care of creating the user/group
* add fallback guard for `SyslogIdentifier`
Related to:
https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2751960797
https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2751961935
2026-02-01 16:46:01 -06:00
Darren Rambaud
6cd9ce753d
nixos/stalwart: add fallback to /var/cache/stalwart-mail
...
* update test to account for fallback
2026-01-28 23:51:51 -06:00
Darren Rambaud
7457ecf7bb
nixos/stalwart: improve code
...
* address review comments:
https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2719419333
https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2719421199
2026-01-28 23:51:50 -06:00
Darren Rambaud
7d08d5257b
nixos/stalwart: update setting description
...
* address review comment:
https://github.com/NixOS/nixpkgs/pull/481815/files#r2706718725
2026-01-28 23:51:48 -06:00
Darren Rambaud
9dc7450f47
stalwart: remove refs to stalwart-mail
...
* re-name systemd service
* update test
2026-01-28 23:51:47 -06:00
Darren Rambaud
f80dce8801
module/stalwart: add guards against data loss
...
* if `stateVersion` < 26.05, will fallback to previous defaults
* add new options to configure `user:group` ownership of service
* address review comments:
https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710218047
https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710223058
2026-01-28 23:51:45 -06:00