tvl-depot/ops/nixos/smtprelay.nix
Vincent Ambo 1eb8067bb0 fix(nixos/smtprelay): Only enable if the user asks for it
Change-Id: Ifbdf9bf9e89a1da68e8c823f61a33275183afcb1
Reviewed-on: https://cl.tvl.fyi/c/depot/+/822
Reviewed-by: BuildkiteCI
Reviewed-by: lukegb <lukegb@tvl.fyi>
Tested-by: BuildkiteCI
2020-06-30 23:32:45 +00:00

53 lines
1.4 KiB
Nix

# NixOS module for configuring the simple SMTP relay.
{ pkgs, config, lib, ... }:
let
inherit (builtins) attrValues mapAttrs;
inherit (lib)
concatStringsSep
mkEnableOption
mkIf
mkOption
types
;
cfg = config.services.depot.smtprelay;
description = "Simple SMTP relay";
# Configuration values that are always overridden. In particular,
# `config` is specified to always load $StateDirectory/secure.config
# (so that passwords can be loaded from there) and logging is pinned
# to stdout for journald compatibility.
overrideArgs = {
logfile = "";
config = "/var/lib/smtprelay/secure.config";
};
# Creates the command line argument string for the service.
prepareArgs = args:
concatStringsSep " "
(attrValues (mapAttrs (key: value: "-${key} '${toString value}'")
(args // overrideArgs)));
in {
options.services.depot.smtprelay = {
enable = mkEnableOption description;
args = mkOption {
type = types.attrsOf types.str;
description = "Key value pairs for command line arguments";
};
};
config = mkIf cfg.enable {
systemd.services.smtprelay = {
inherit description;
script = "${config.depot.third_party.smtprelay}/bin/smtprelay ${prepareArgs cfg.args}";
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Restart = "always";
StateDirectory = "smtprelay";
DynamicUser = true;
};
};
};
}