first shot at mail setup on ymir

1 files changed, 27 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index e116c654..52e43d3e 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -289,4 +289,31 @@ in rec {
     enable = true;
     basePath = services.gitolite.dataDir + "/repositories";
   };
+
+  services.postfix = {
+    enable = true;
+    hostname = "ymir.yggdrasil.li";
+    recipientDelimiter = "+";
+    rootAlias = "gkleen";
+    setSendmail = true;
+    destination = ["yggdrasil.li" "ymir.yggdrasil.li" "mail.yggdrasil.li" "praseodym.org" "ymir.praseodym.org" "mail.praseodym.org" "141.li" "ymir.141.li" "mail.141.li" "xmpp.li" "ymir.xmpp.li" "mail.xmpp.li" "dirty-haskell.org" "mail.dirty-haskell.org" "explainuxul.de" "lmu.li" "localhost.yggdrasil.li" "localhost"];
+    sslCert = "";
+    sslKey = "";
+  };
+
+  services.acme = {
+    certs = {
+      "yggdrasil.li" = {
+        webroot = "/srv/www/acme/yggdrasil.li";
+        allowKeysForGroup = true;
+        email = "phikeebaogobaegh@141.li";
+        extraDomains = builtins.listToAttrs (builtins.map (name: { inherit name; value = "/srv/www/acme/${name}"; })
+          ["git.yggdrasil.li" "dirty-haskell.org" "www.dirty-haskell.org" "141.li" "www.141.li" "xmpp.li" "www.xmpp.li" "www.yggdrasil.li" "praseodym.org" "www.praseodym.org" "mail.dirty-haskell.org" "mail.141.li" "mail.xmpp.li" "mail.yggdrasil.li" "mail.praseodym.org"]);
+        postRun = ''
+          systemctl reload nginx.service
+          prosodyctl reload
+        '';
+      };
+    };
+  };
 }