qo.is/infrastructure
3
0
Fork 0
Code Issues 10 Pull requests Projects Activity Actions

Switch mstmp password reader to coreutils for services #35

Merged
fabianhauser merged 1 commit from loadbalancer-mapping-problem into main 2025-02-25 21:35:19 +01:00
Conversation 0 Commits 1 Files changed 2 +3 -2
2 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos-modules/outgoing-server-mail/default.nix
View file

@ -40,7 +40,7 @@ with lib;
host = "mail.cyon.ch";
user = "system@qo.is";
from = "no-reply@qo.is";
passwordeval = "${pkgs.busybox}/bin/cat ${config.sops.secrets."msmtp/password".path}";
passwordeval = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."msmtp/password".path}";
};
};
};

3
nixos-modules/vault/default.nix
View file

@ -34,6 +34,8 @@ with lib;
ROCKET_PORT = 8222;
USE_SENDMAIL = true;
SENDMAIL_COMMAND = "${pkgs.msmtp}/bin/sendmail";
SMTP_FROM = "vault@qo.is";
SMTP_FROM_NAME = cfg.domain;
@ -68,7 +70,6 @@ with lib;
# See https://search.nixos.org/options?channel=unstable&show=services.vaultwarden.environmentFile
sops.secrets."vaultwarden/environment-file".restartUnits = [ "vaultwarden.service" ];
systemd.services.vaultwarden.path = [ pkgs.msmtp ];
users.users.vaultwarden.extraGroups = [ "postdrop" ];
networking.hosts."127.0.0.1" = [ cfg.domain ];