From fe7ea8aee1c07d5a7be85a3e2d12b345a40f3f71 Mon Sep 17 00:00:00 2001
From: Dennis Frieberg <dennis@frieberg.de>
Date: Mon, 12 Jun 2023 08:37:49 +0200
Subject: [PATCH] first working steps on nyarlathotep

---
 nixos/machines/nyarlathotep/configuration.nix |  7 +++
 nixos/machines/nyarlathotep/mail.nix          | 46 +++++++++++++++++++
 2 files changed, 53 insertions(+)
 create mode 100644 nixos/machines/nyarlathotep/configuration.nix
 create mode 100644 nixos/machines/nyarlathotep/mail.nix

diff --git a/nixos/machines/nyarlathotep/configuration.nix b/nixos/machines/nyarlathotep/configuration.nix
new file mode 100644
index 0000000..b2714bb
--- /dev/null
+++ b/nixos/machines/nyarlathotep/configuration.nix
@@ -0,0 +1,7 @@
+flake-inputs:
+{config, pkgs, lib, ... }: {
+
+imports = [(import ./mail.nix flake-inputs)];
+
+# System configuration here
+}
diff --git a/nixos/machines/nyarlathotep/mail.nix b/nixos/machines/nyarlathotep/mail.nix
new file mode 100644
index 0000000..ebf1d38
--- /dev/null
+++ b/nixos/machines/nyarlathotep/mail.nix
@@ -0,0 +1,46 @@
+flake-inputs:
+{pkgs, config, lib, ...}: {
+  imports = [flake-inputs.nixos-mailserver.nixosModule];
+
+  mailserver = {
+    enable = true;
+    debug = true; # TODO disable
+    fqdn = "mathebau.de";
+    sendingFqdn = "fb04184.mathematik.tu-darmstadt.de";
+    domains = [
+      "mathebau.de"
+      "lists.mathebau.de"
+    ];
+    # forwards = #TODO
+    # loginAccounts = #TODO
+    # extraVirtualAliases = # TODO # only for local things (maybe don't use?)
+    certificateDomains = ["imap.mathebau.de"];
+    # certificateScheme = "manual"; # Do we need CERTS? We don't want to run a webmailer YES IMAP!!
+    #	certificateFile = #TODO
+    # keyFile = #TODO
+
+    enableSubmission = false; # no starttls smtp
+
+    # Fun dovecot stuff :
+
+    # mailDirectory = "/var/vmail/"; # directory to store mail leave at default.
+     
+    hierarchySeparator = "/"; # seperator for imap mailboxes from client view
+
+    # Caching of search indices
+    indexDir = "/var/lib/dovecot/indices";
+    fullTextSearch = {
+      enforced = "body"; # only brute force headers if no search index is available
+    };
+    lmtpSaveToDetailMailbox = "no";
+    # no starttls
+    enableImap = false;
+
+
+    # TODO checkout redis `config.services.redis.servers.rspamd.`
+
+    # TODO
+    # borgbackup = {
+    # };
+  };
+}