summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2025-08-10 19:04:47 +0200
committerGregor Kleen <gkleen@yggdrasil.li>2025-08-10 19:04:47 +0200
commit7c1869afb012a9c18918b36ec91e26a248a53bc5 (patch)
tree3f68599dcb65bcabd7b0c71b3995307129b4324d
parentb1a562bee6603802a909dc33b8c01d69edbcc5b2 (diff)
downloadnixos-7c1869afb012a9c18918b36ec91e26a248a53bc5.tar
nixos-7c1869afb012a9c18918b36ec91e26a248a53bc5.tar.gz
nixos-7c1869afb012a9c18918b36ec91e26a248a53bc5.tar.bz2
nixos-7c1869afb012a9c18918b36ec91e26a248a53bc5.tar.xz
nixos-7c1869afb012a9c18918b36ec91e26a248a53bc5.zip
...
-rw-r--r--_sources/generated.json12
-rw-r--r--_sources/generated.nix12
-rw-r--r--flake.lock60
-rw-r--r--hosts/sif/email/default.nix17
-rw-r--r--hosts/surtr/email/default.nix21
5 files changed, 61 insertions, 61 deletions
diff --git a/_sources/generated.json b/_sources/generated.json
index 802099d7..670ba5c6 100644
--- a/_sources/generated.json
+++ b/_sources/generated.json
@@ -270,11 +270,11 @@
270 "pinned": false, 270 "pinned": false,
271 "src": { 271 "src": {
272 "name": null, 272 "name": null,
273 "sha256": "sha256-8kd17ChqLuVH5/OdPc2rVDKEDWHl9ZWLh8k+EBrCGH8=", 273 "sha256": "sha256-ipbZJ0mPCuwzb/TDtXXUBTuWOcSsKGAJ1GEGIgB2G7E=",
274 "type": "url", 274 "type": "url",
275 "url": "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.87/netboot.xyz.efi" 275 "url": "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.88/netboot.xyz.efi"
276 }, 276 },
277 "version": "2.0.87" 277 "version": "2.0.88"
278 }, 278 },
279 "netbootxyz-lkrn": { 279 "netbootxyz-lkrn": {
280 "cargoLocks": null, 280 "cargoLocks": null,
@@ -285,11 +285,11 @@
285 "pinned": false, 285 "pinned": false,
286 "src": { 286 "src": {
287 "name": null, 287 "name": null,
288 "sha256": "sha256-/qY3NdRC0SghQ4kamrkm9EFumrKlirqDCJ+XY+jHWLA=", 288 "sha256": "sha256-igy3O30noS25dU7ZnHuKrWqLLkjjd/L46IdCTd038dI=",
289 "type": "url", 289 "type": "url",
290 "url": "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.87/netboot.xyz.lkrn" 290 "url": "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.88/netboot.xyz.lkrn"
291 }, 291 },
292 "version": "2.0.87" 292 "version": "2.0.88"
293 }, 293 },
294 "postfix-mta-sts-resolver": { 294 "postfix-mta-sts-resolver": {
295 "cargoLocks": null, 295 "cargoLocks": null,
diff --git a/_sources/generated.nix b/_sources/generated.nix
index 75373a48..b856af2c 100644
--- a/_sources/generated.nix
+++ b/_sources/generated.nix
@@ -164,18 +164,18 @@
164 }; 164 };
165 netbootxyz-efi = { 165 netbootxyz-efi = {
166 pname = "netbootxyz-efi"; 166 pname = "netbootxyz-efi";
167 version = "2.0.87"; 167 version = "2.0.88";
168 src = fetchurl { 168 src = fetchurl {
169 url = "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.87/netboot.xyz.efi"; 169 url = "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.88/netboot.xyz.efi";
170 sha256 = "sha256-8kd17ChqLuVH5/OdPc2rVDKEDWHl9ZWLh8k+EBrCGH8="; 170 sha256 = "sha256-ipbZJ0mPCuwzb/TDtXXUBTuWOcSsKGAJ1GEGIgB2G7E=";
171 }; 171 };
172 }; 172 };
173 netbootxyz-lkrn = { 173 netbootxyz-lkrn = {
174 pname = "netbootxyz-lkrn"; 174 pname = "netbootxyz-lkrn";
175 version = "2.0.87"; 175 version = "2.0.88";
176 src = fetchurl { 176 src = fetchurl {
177 url = "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.87/netboot.xyz.lkrn"; 177 url = "https://github.com/netbootxyz/netboot.xyz/releases/download/2.0.88/netboot.xyz.lkrn";
178 sha256 = "sha256-/qY3NdRC0SghQ4kamrkm9EFumrKlirqDCJ+XY+jHWLA="; 178 sha256 = "sha256-igy3O30noS25dU7ZnHuKrWqLLkjjd/L46IdCTd038dI=";
179 }; 179 };
180 }; 180 };
181 postfix-mta-sts-resolver = { 181 postfix-mta-sts-resolver = {
diff --git a/flake.lock b/flake.lock
index 9a1470a6..14568259 100644
--- a/flake.lock
+++ b/flake.lock
@@ -507,11 +507,11 @@
507 "xwayland-satellite-unstable": "xwayland-satellite-unstable" 507 "xwayland-satellite-unstable": "xwayland-satellite-unstable"
508 }, 508 },
509 "locked": { 509 "locked": {
510 "lastModified": 1753514742, 510 "lastModified": 1754797984,
511 "narHash": "sha256-OP7hZTjnOLP3X6cWldPLcxQ4vvDYid6SlOf1mw+XRCg=", 511 "narHash": "sha256-t2WFkdB2qUyZt5rdqmJ340kqhvQWWOCJBJIc1nQ/Hg4=",
512 "owner": "sodiboo", 512 "owner": "sodiboo",
513 "repo": "niri-flake", 513 "repo": "niri-flake",
514 "rev": "af1af659e690b3e535d94c54a64700767bfc9544", 514 "rev": "647a310f1eaa59abec8aa215ff69d8979195425e",
515 "type": "github" 515 "type": "github"
516 }, 516 },
517 "original": { 517 "original": {
@@ -541,11 +541,11 @@
541 "niri-unstable": { 541 "niri-unstable": {
542 "flake": false, 542 "flake": false,
543 "locked": { 543 "locked": {
544 "lastModified": 1752870529, 544 "lastModified": 1754742008,
545 "narHash": "sha256-23DJk5EfEDCq7Xy1QELcayG0VxbbWpdQ6t7jbhae1Ok=", 545 "narHash": "sha256-Tp0FG7VpLudVEC622d91z2hbdfPLCXxw0Nv43iNN4O0=",
546 "owner": "YaLTeR", 546 "owner": "YaLTeR",
547 "repo": "niri", 547 "repo": "niri",
548 "rev": "fefc0bc0a71556eb75352e2b611e50eb5d3bf9c2", 548 "rev": "67361f88fd01974ebee4cf80f0e29c87d805cc39",
549 "type": "github" 549 "type": "github"
550 }, 550 },
551 "original": { 551 "original": {
@@ -582,11 +582,11 @@
582 ] 582 ]
583 }, 583 },
584 "locked": { 584 "locked": {
585 "lastModified": 1752985182, 585 "lastModified": 1754800038,
586 "narHash": "sha256-sX8Neff8lp3TCHai6QmgLr5AD8MdsQQX3b52C1DVXR8=", 586 "narHash": "sha256-UbLO8/0pVBXLJuyRizYOJigtzQAj8Z2bTnbKSec/wN0=",
587 "owner": "Mic92", 587 "owner": "Mic92",
588 "repo": "nix-index-database", 588 "repo": "nix-index-database",
589 "rev": "fafdcb505ba605157ff7a7eeea452bc6d6cbc23c", 589 "rev": "b65f8d80656f9fcbd1fecc4b7f0730f468333142",
590 "type": "github" 590 "type": "github"
591 }, 591 },
592 "original": { 592 "original": {
@@ -639,11 +639,11 @@
639 }, 639 },
640 "nixos-hardware": { 640 "nixos-hardware": {
641 "locked": { 641 "locked": {
642 "lastModified": 1753122741, 642 "lastModified": 1754564048,
643 "narHash": "sha256-nFxE8lk9JvGelxClCmwuJYftbHqwnc01dRN4DVLUroM=", 643 "narHash": "sha256-dz303vGuzWjzOPOaYkS9xSW+B93PSAJxvBd6CambXVA=",
644 "owner": "NixOS", 644 "owner": "NixOS",
645 "repo": "nixos-hardware", 645 "repo": "nixos-hardware",
646 "rev": "cc66fddc6cb04ab479a1bb062f4d4da27c936a22", 646 "rev": "26ed7a0d4b8741fe1ef1ee6fa64453ca056ce113",
647 "type": "github" 647 "type": "github"
648 }, 648 },
649 "original": { 649 "original": {
@@ -780,11 +780,11 @@
780 }, 780 },
781 "nixpkgs-stable_3": { 781 "nixpkgs-stable_3": {
782 "locked": { 782 "locked": {
783 "lastModified": 1753345091, 783 "lastModified": 1754689972,
784 "narHash": "sha256-CdX2Rtvp5I8HGu9swBmYuq+ILwRxpXdJwlpg8jvN4tU=", 784 "narHash": "sha256-eogqv6FqZXHgqrbZzHnq43GalnRbLTkbBbFtEfm1RSc=",
785 "owner": "NixOS", 785 "owner": "NixOS",
786 "repo": "nixpkgs", 786 "repo": "nixpkgs",
787 "rev": "3ff0e34b1383648053bba8ed03f201d3466f90c9", 787 "rev": "fc756aa6f5d3e2e5666efcf865d190701fef150a",
788 "type": "github" 788 "type": "github"
789 }, 789 },
790 "original": { 790 "original": {
@@ -828,11 +828,11 @@
828 }, 828 },
829 "nixpkgs_2": { 829 "nixpkgs_2": {
830 "locked": { 830 "locked": {
831 "lastModified": 1753429684, 831 "lastModified": 1754725699,
832 "narHash": "sha256-9h7+4/53cSfQ/uA3pSvCaBepmZaz/dLlLVJnbQ+SJjk=", 832 "narHash": "sha256-iAcj9T/Y+3DBy2J0N+yF9XQQQ8IEb5swLFzs23CdP88=",
833 "owner": "NixOS", 833 "owner": "NixOS",
834 "repo": "nixpkgs", 834 "repo": "nixpkgs",
835 "rev": "7fd36ee82c0275fb545775cc5e4d30542899511d", 835 "rev": "85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054",
836 "type": "github" 836 "type": "github"
837 }, 837 },
838 "original": { 838 "original": {
@@ -1093,11 +1093,11 @@
1093 ] 1093 ]
1094 }, 1094 },
1095 "locked": { 1095 "locked": {
1096 "lastModified": 1753063596, 1096 "lastModified": 1754287816,
1097 "narHash": "sha256-el1vFxDk6DR2hKGYnMfQHR7+K4aMiJDKQRMP3gdh+ZI=", 1097 "narHash": "sha256-kDt0HB89oWTlTQMnTwDxx3BlRHK1AdAJ1kMcVYGuccs=",
1098 "owner": "pyproject-nix", 1098 "owner": "pyproject-nix",
1099 "repo": "pyproject.nix", 1099 "repo": "pyproject.nix",
1100 "rev": "cac90713492f23be5f1072bae88406890b9c68f6", 1100 "rev": "efe944d0902f406c28b4e8662312292a37e4de87",
1101 "type": "github" 1101 "type": "github"
1102 }, 1102 },
1103 "original": { 1103 "original": {
@@ -1165,11 +1165,11 @@
1165 ] 1165 ]
1166 }, 1166 },
1167 "locked": { 1167 "locked": {
1168 "lastModified": 1752544651, 1168 "lastModified": 1754328224,
1169 "narHash": "sha256-GllP7cmQu7zLZTs9z0J2gIL42IZHa9CBEXwBY9szT0U=", 1169 "narHash": "sha256-glPK8DF329/dXtosV7YSzRlF4n35WDjaVwdOMEoEXHA=",
1170 "owner": "Mic92", 1170 "owner": "Mic92",
1171 "repo": "sops-nix", 1171 "repo": "sops-nix",
1172 "rev": "2c8def626f54708a9c38a5861866660395bb3461", 1172 "rev": "49021900e69812ba7ddb9e40f9170218a7eca9f4",
1173 "type": "github" 1173 "type": "github"
1174 }, 1174 },
1175 "original": { 1175 "original": {
@@ -1240,11 +1240,11 @@
1240 ] 1240 ]
1241 }, 1241 },
1242 "locked": { 1242 "locked": {
1243 "lastModified": 1753400079, 1243 "lastModified": 1754719699,
1244 "narHash": "sha256-VC76rfCgtaKPopaLOyAEZ80bpOTQDr7wEZRUCMjoacE=", 1244 "narHash": "sha256-Ek6WILkhVMDWm9j0L23gxHhDt62z1+A68D+pPt0ghao=",
1245 "owner": "pyproject-nix", 1245 "owner": "pyproject-nix",
1246 "repo": "uv2nix", 1246 "repo": "uv2nix",
1247 "rev": "350ae196e0e414c03db118d385eabaf50e2a0a53", 1247 "rev": "38ead6a16ba1be029dd40fe17fc064d6934847d2",
1248 "type": "github" 1248 "type": "github"
1249 }, 1249 },
1250 "original": { 1250 "original": {
@@ -1297,11 +1297,11 @@
1297 "xwayland-satellite-unstable": { 1297 "xwayland-satellite-unstable": {
1298 "flake": false, 1298 "flake": false,
1299 "locked": { 1299 "locked": {
1300 "lastModified": 1752338000, 1300 "lastModified": 1754533920,
1301 "narHash": "sha256-Fxlp/yKtynug0jyuauAmvZU2SzHCfwlwWf85j+IvQ0U=", 1301 "narHash": "sha256-fCZ68Yud1sUCq6UNXj0SDyiBgVA8gJUE+14ZFGsFJG8=",
1302 "owner": "Supreeeme", 1302 "owner": "Supreeeme",
1303 "repo": "xwayland-satellite", 1303 "repo": "xwayland-satellite",
1304 "rev": "ba78881a68182ce338041846164cbfed0d70935c", 1304 "rev": "e0d1dad25a158551ab58547b2ece4b7d5a19929c",
1305 "type": "github" 1305 "type": "github"
1306 }, 1306 },
1307 "original": { 1307 "original": {
diff --git a/hosts/sif/email/default.nix b/hosts/sif/email/default.nix
index 4eda236e..bebf7980 100644
--- a/hosts/sif/email/default.nix
+++ b/hosts/sif/email/default.nix
@@ -5,11 +5,12 @@
5 enableSmtp = false; 5 enableSmtp = false;
6 enableSubmission = false; 6 enableSubmission = false;
7 setSendmail = true; 7 setSendmail = true;
8 networksStyle = "host"; 8 # networksStyle = "host";
9 hostname = "sif.midgard.yggdrasil"; 9 settings.main = {
10 destination = []; 10 recpipient_delimiter = "+";
11 recipientDelimiter = "+"; 11 mydestination = [];
12 config = { 12 myhostname = "sif.midgard.yggdrasil";
13
13 mydomain = "yggdrasil.li"; 14 mydomain = "yggdrasil.li";
14 15
15 local_transport = "error:5.1.1 No local delivery"; 16 local_transport = "error:5.1.1 No local delivery";
@@ -19,7 +20,7 @@
19 20
20 inet_interfaces = "loopback-only"; 21 inet_interfaces = "loopback-only";
21 22
22 message_size_limit = "0"; 23 message_size_limit = 0;
23 24
24 authorized_submit_users = "inline:{ gkleen= }"; 25 authorized_submit_users = "inline:{ gkleen= }";
25 authorized_flush_users = "inline:{ gkleen= }"; 26 authorized_flush_users = "inline:{ gkleen= }";
@@ -41,7 +42,7 @@
41 /^uni2work(-[^@]*)?@ifi\.lmu\.de$/ uni2work@ifi.lmu.de 42 /^uni2work(-[^@]*)?@ifi\.lmu\.de$/ uni2work@ifi.lmu.de
42 /@ifi\.lmu\.de$/ gregor.kleen@ifi.lmu.de 43 /@ifi\.lmu\.de$/ gregor.kleen@ifi.lmu.de
43 ''}''; 44 ''}'';
44 relayhost = "[surtr.yggdrasil.li]:465"; 45 relayhost = ["[surtr.yggdrasil.li]:465"];
45 default_transport = "relay"; 46 default_transport = "relay";
46 47
47 smtp_sasl_auth_enable = true; 48 smtp_sasl_auth_enable = true;
@@ -56,7 +57,7 @@
56 smtp_tls_loglevel = "1"; 57 smtp_tls_loglevel = "1";
57 smtp_dns_support_level = "dnssec"; 58 smtp_dns_support_level = "dnssec";
58 }; 59 };
59 masterConfig = { 60 settings.master = {
60 submission = { 61 submission = {
61 type = "inet"; 62 type = "inet";
62 private = false; 63 private = false;
diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index de8a6730..a3e06ca6 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -124,13 +124,14 @@ in {
124 services.postfix = { 124 services.postfix = {
125 enable = true; 125 enable = true;
126 enableSmtp = false; 126 enableSmtp = false;
127 hostname = "surtr.yggdrasil.li";
128 recipientDelimiter = "";
129 setSendmail = true; 127 setSendmail = true;
130 postmasterAlias = ""; rootAlias = ""; extraAliases = ""; 128 postmasterAlias = ""; rootAlias = ""; extraAliases = "";
131 destination = []; 129 settings.main = {
132 networks = []; 130 recpipient_delimiter = "";
133 config = { 131 mydestination = [];
132 mynetworks = [];
133 myhostname = "surtr.yggdrasil.li";
134
134 smtpd_tls_security_level = "may"; 135 smtpd_tls_security_level = "may";
135 136
136 smtpd_tls_chain_files = [ 137 smtpd_tls_chain_files = [
@@ -177,10 +178,8 @@ in {
177 178
178 local_recipient_maps = ""; 179 local_recipient_maps = "";
179 180
180 # 10 GiB 181 message_size_limit = 10 * 1024 * 1024 * 1024;
181 message_size_limit = "10737418240"; 182 mailbox_size_limit = 10 * 1024 * 1024 * 1024;
182 # 10 GiB
183 mailbox_size_limit = "10737418240";
184 183
185 smtpd_delay_reject = true; 184 smtpd_delay_reject = true;
186 smtpd_helo_required = true; 185 smtpd_helo_required = true;
@@ -280,7 +279,7 @@ in {
280 query = SELECT value FROM recipient_bcc_maps WHERE key = '%s' 279 query = SELECT value FROM recipient_bcc_maps WHERE key = '%s'
281 ''}''; 280 ''}'';
282 }; 281 };
283 masterConfig = { 282 settings.master = {
284 "465" = { 283 "465" = {
285 type = "inet"; 284 type = "inet";
286 private = false; 285 private = false;
@@ -660,7 +659,7 @@ in {
660 quota_status_success = DUNNO 659 quota_status_success = DUNNO
661 quota_status_nouser = DUNNO 660 quota_status_nouser = DUNNO
662 quota_grace = 10%% 661 quota_grace = 10%%
663 quota_max_mail_size = ${config.services.postfix.config.message_size_limit} 662 quota_max_mail_size = ${toString config.services.postfix.settings.main.message_size_limit}
664 quota_vsizes = yes 663 quota_vsizes = yes
665 } 664 }
666 665