03d1986316
The new version brings the new secretsDir setting which means we no longer have to hardcode /run/agenix everywhere. Change-Id: I4b579d7233d315a780d7671869d5d06722d769fa Reviewed-on: https://cl.tvl.fyi/c/depot/+/5646 Tested-by: BuildkiteCI Reviewed-by: tazjin <tazjin@tvl.su> Reviewed-by: grfn <grfn@gws.fyi> Autosubmit: sterni <sternenseemann@systemli.org>
61 lines
1.5 KiB
Nix
61 lines
1.5 KiB
Nix
# NixOS module for configuring the simple SMTP relay.
|
|
{ depot, pkgs, config, lib, ... }:
|
|
|
|
let
|
|
inherit (builtins) attrValues mapAttrs;
|
|
inherit (lib)
|
|
concatStringsSep
|
|
mkEnableOption
|
|
mkIf
|
|
mkOption
|
|
types
|
|
;
|
|
|
|
cfg = config.services.depot.smtprelay;
|
|
description = "Simple SMTP relay";
|
|
|
|
# Configuration values that are always overridden.
|
|
#
|
|
# - logging is pinned to stdout for journald compatibility
|
|
# - secret config is loaded through systemd's credential loading facility
|
|
overrideArgs = {
|
|
logfile = "";
|
|
config = "$CREDENTIALS_DIRECTORY/secrets";
|
|
};
|
|
|
|
# Creates the command line argument string for the service.
|
|
prepareArgs = args:
|
|
concatStringsSep " "
|
|
(attrValues (mapAttrs (key: value: "-${key} \"${toString value}\"")
|
|
(args // overrideArgs)));
|
|
in
|
|
{
|
|
options.services.depot.smtprelay = {
|
|
enable = mkEnableOption description;
|
|
|
|
args = mkOption {
|
|
type = types.attrsOf types.str;
|
|
description = "Key value pairs for command line arguments";
|
|
};
|
|
|
|
secretsFile = mkOption {
|
|
type = types.str;
|
|
default = config.age.secretsDir + "/smtprelay";
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
systemd.services.smtprelay = {
|
|
inherit description;
|
|
script = "${depot.third_party.smtprelay}/bin/smtprelay ${prepareArgs cfg.args}";
|
|
wantedBy = [ "multi-user.target" ];
|
|
|
|
serviceConfig = {
|
|
Restart = "always";
|
|
StateDirectory = "smtprelay";
|
|
DynamicUser = true;
|
|
LoadCredential = "secrets:${cfg.secretsFile}";
|
|
};
|
|
};
|
|
};
|
|
}
|