qo.is/infrastructure
3
0
Fork 0
Code Issues 10 Pull requests Projects Activity Actions

Switch mstmp password reader to coreutils for services
All checks were successful
CI / build (push) Successful in 2m46s
Details

Browse source
This commit is contained in:
Fabian Hauser 2025-02-25 22:17:58 +02:00
parent c503124425
commit 26022cf3dd
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos-modules/outgoing-server-mail/default.nix
View file

@ -40,7 +40,7 @@ with lib;
host = "mail.cyon.ch"; host = "mail.cyon.ch";
user = "system@qo.is"; user = "system@qo.is";
from = "no-reply@qo.is"; from = "no-reply@qo.is";
passwordeval = "${pkgs.busybox}/bin/cat ${config.sops.secrets."msmtp/password".path}"; passwordeval = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."msmtp/password".path}";
}; };
}; };
}; };

3
nixos-modules/vault/default.nix
View file

@ -34,6 +34,8 @@ with lib;
ROCKET_PORT = 8222; ROCKET_PORT = 8222;
USE_SENDMAIL = true; USE_SENDMAIL = true;
SENDMAIL_COMMAND = "${pkgs.msmtp}/bin/sendmail";
SMTP_FROM = "vault@qo.is"; SMTP_FROM = "vault@qo.is";
SMTP_FROM_NAME = cfg.domain; SMTP_FROM_NAME = cfg.domain;
@ -68,7 +70,6 @@ with lib;
# See https://search.nixos.org/options?channel=unstable&show=services.vaultwarden.environmentFile # See https://search.nixos.org/options?channel=unstable&show=services.vaultwarden.environmentFile
sops.secrets."vaultwarden/environment-file".restartUnits = [ "vaultwarden.service" ]; sops.secrets."vaultwarden/environment-file".restartUnits = [ "vaultwarden.service" ];
systemd.services.vaultwarden.path = [ pkgs.msmtp ];
users.users.vaultwarden.extraGroups = [ "postdrop" ]; users.users.vaultwarden.extraGroups = [ "postdrop" ];
networking.hosts."127.0.0.1" = [ cfg.domain ]; networking.hosts."127.0.0.1" = [ cfg.domain ];