lass/2configs/mail/internet-gateway.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

{ config, lib, pkgs, ... }:
{
  security.acme.certs."mail.lassul.us" = {
    group = "lasscert";
    webroot = "/var/lib/acme/acme-challenge";
  };
  users.groups.lasscert.members = [
    "exim"
    "nginx"
  ];

  krebs.exim-smarthost = {
    enable = true;
    primary_hostname = "lassul.us";
    dkim = [
      { domain = "lassul.us"; }
    ];
    ssl_cert = "/var/lib/acme/mail.lassul.us/fullchain.pem";
    ssl_key = "/var/lib/acme/mail.lassul.us/key.pem";
    local_domains = [
      "localhost"
      "lassul.us"
      "ubikmedia.eu"
      "ubikmedia.de"
      "apanowicz.de"
      "alewis.de"
      "jarugadesign.de"
      "beesmooth.ch"
      "event-extra.de"
      "jla-trading.com"
    ];
    extraRouters = ''
      forward_lassul_us:
        driver = manualroute
        domains = lassul.us
        transport = remote_smtp
        route_list = * orange.r
        no_more

      forward_ubik:
        driver = manualroute
        domains = ubikmedia.eu:ubikmedia.de:apanowicz.de:alewis.de:jarugadesign.de:beesmooth.ch:event-extra.de:jla-trading.com
        transport = remote_smtp
        route_list = * ubik.r
        no_more
    '';
  };
}