jet/extremist-software
jet/extremist-software
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: migrate to agenix for secret management

Browse source
This commit is contained in:
Jet Pham 2026-03-05 15:10:30 -08:00
parent e7e8d154aa
commit 8e174ba500
No known key found for this signature in database
23 changed files with 234 additions and 120 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/mail.nix
View file

@ -43,7 +43,7 @@
authentication.fallback-admin = {
user = "admin";
secret = config.mySecrets.stalwartAdmin;
secret = "%{file:/run/agenix/stalwart-admin}%";
};
};
};
@ -51,10 +51,4 @@
# Allow Stalwart to read the ACME certificate procured for Caddy
systemd.services.stalwart.serviceConfig.SupplementaryGroups = [ "acme" ];
# Open Firewalls for Mail
networking.firewall.allowedTCPPorts = [
993 # IMAP (Secure)
4190 # Sieve
8080 # Admin UI (Reverse proxied, but good to double check loopback)
];
}