50 lines
1.4 KiB
Nix
50 lines
1.4 KiB
Nix
{ config, lib, ... }:
|
|
{
|
|
sops = {
|
|
secrets = {
|
|
"wireguard/conf" = { };
|
|
"nextcloud/adminPassword" = { };
|
|
"openldap/adminPassword" = lib.mkIf config.services.openldap.enable {
|
|
owner = config.users.users.openldap.name;
|
|
group = config.users.users.openldap.group;
|
|
mode = "0660";
|
|
};
|
|
"lam/env" = { };
|
|
"dovecot/openldap" = lib.mkIf (config.services.postfix.enable && config.services.openldap.enable) {
|
|
owner = config.services.dovecot2.user;
|
|
group = config.services.dovecot2.group;
|
|
mode = "0660";
|
|
};
|
|
|
|
"stalwart/adminPassword" =
|
|
let
|
|
inherit (config.users.users.stalwart-mail) name group;
|
|
in
|
|
lib.mkIf config.services.stalwart-mail.enable {
|
|
inherit group;
|
|
owner = name;
|
|
};
|
|
"stalwart/tsig" =
|
|
let
|
|
inherit (config.users.users.stalwart-mail) name group;
|
|
in
|
|
lib.mkIf config.services.stalwart-mail.enable {
|
|
inherit group;
|
|
owner = name;
|
|
};
|
|
"stalwart/db" =
|
|
let
|
|
inherit (config.users.users.stalwart-mail) name group;
|
|
in
|
|
lib.mkIf config.services.stalwart-mail.enable {
|
|
inherit group;
|
|
owner = name;
|
|
};
|
|
"acme/pdns" = {
|
|
mode = "0660";
|
|
owner = "acme";
|
|
group = "acme";
|
|
};
|
|
};
|
|
};
|
|
}
|