infrastructure/modules/dgn-notify/default.nix
sinavir fd6674fd5d
All checks were successful
build configuration / build_web02 (push) Successful in 1m17s
build configuration / build_rescue01 (push) Successful in 1m17s
build configuration / build_storage01 (push) Successful in 1m23s
build configuration / build_vault01 (push) Successful in 1m23s
build configuration / build_compute01 (push) Successful in 1m25s
lint / check (push) Successful in 23s
build configuration / build_web01 (push) Successful in 1m42s
build configuration / push_to_cache (push) Successful in 2m15s
feat: Enable sendmail setuid wrapper
2024-04-20 20:40:26 +02:00

49 lines
1.2 KiB
Nix

{
config,
pkgs,
lib,
...
}:
{
options.dgn-notify = {
enable = lib.mkEnableOption "DGNum email notification cli" // {
default = true;
};
};
config = lib.mkIf config.dgn-notify.enable {
services.mail.sendmailSetuidWrapper.group = lib.mkForce "mail";
users.groups.mail = { };
programs.msmtp = {
enable = true;
setSendmail = true;
accounts.default = {
tls = true;
tls_starttls = false;
port = 465;
auth = true;
host = "kurisu.lahfa.xyz";
from = "noreply@infra.dgnum.eu";
user = "web-services@infra.dgnum.eu";
passwordeval = "cat ${config.age.secrets.mail.path}";
};
};
services.systemd-notify = {
enable = true;
command = builtins.toString (
pkgs.writeShellScript "sendmail" ''
${pkgs.msmtp}/bin/sendmail -i -t <<ERRMAIL
To: admins+monitoring@dgnum.eu
Subject: [$HOSTNAME] Systemd failure: $1
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
$(systemctl status --full "$1")
ERRMAIL
''
);
};
age-secrets.sources = [ ./. ];
};
}