smallest change

modules/nixos/services/mail/default.nix

@@ -0,0 +1,87 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib;
+with lib.custom; let
+  cfg = config.services.mail;
+
+  sec = config.age.secrets;
+in {
+  options.services.mail = with types; {
+    enable = mkBoolOpt false "Enable Simple Nixos Mailserver";
+  };
+
+  config = mkIf cfg.enable {
+    age.secrets = {
+      webmaster-pw = {
+        file = ./sec/webmaster-pw.age;
+      };
+      zoeycomputer-pw = {
+        file = ./sec/zoey-zoeycomputer-pw.age;
+      };
+      zmio-pw = {
+        file = ./sec/zmio-pw.age;
+      };
+      zach-pw.file = ./sec/zach-pw.age;
+      emily-pw.file = ./sec/emily-piccat.age;
+    };
+
+    mailserver = {
+      enable = true;
+      fqdn = "mail.zoeys.email";
+      domains = ["zoeys.email" "zoeys.cloud" "zoeys.computer" "zackmyers.io" "zacharymyers.com" "pictureofcat.com"];
+
+      loginAccounts = {
+        "zoey@zoeys.email" = {
+          hashedPasswordFile = sec.webmaster-pw.path;
+          aliases = ["zoey@zoeys.cloud" "postmaster@zoeys.email" "abuse@zoeys.email"];
+        };
+        "hi@zoeys.computer" = {
+          hashedPasswordFile = sec.zoeycomputer-pw.path;
+          aliases = ["spam@zoeys.computer"];
+        };
+        "me@zackmyers.io" = {
+          hashedPasswordFile = sec.zmio-pw.path;
+          aliases = ["zach@zacharymyers.com" "zack@zacharymyers.com"];
+        };
+        "gf@zackmyers.io" = {
+          hashedPasswordFile = sec.emily-pw.path;
+          aliases = ["emily@pictureofcat.com"];
+        };
+      };
+
+      certificateScheme = "acme-nginx";
+      virusScanning = true;
+    };
+
+    # services.nginx = {
+    #   virtualHosts = {
+    #     "cal.zoeys.cloud" = {
+    #       forceSSL = true;
+    #       enableACME = true;
+    #       locations."/" = {
+    #         proxyPass = "http://localhost:5232/";
+    #         extraConfig = ''
+    #           proxy_set_header  X-Script-Name /;
+    #           proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
+    #           proxy_pass_header Authorization;
+    #         '';
+    #       };
+    #     };
+    #   };
+    # };
+
+    services.roundcube = {
+      enable = true;
+      hostName = "zoeys.email";
+      extraConfig = ''
+        $config['smtp_server'] = "tls://${config.mailserver.fqdn}";
+        $config['smtp_user'] = "%u";
+        $config['smtp_pass'] = "%p";
+      '';
+    };
+  };
+}

modules/nixos/services/mail/sec/emily-piccat.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 CtmR6w GByJvx+LFQ6yzgAl/liuJjfzjkwZMHC+R+aKNfKNAmY
+S5csNYDpwtHvIWe5W0lEiKbVnR2FcOtRU5WQW2cALAA
+-> ssh-ed25519 +be3hg 68FeHprHjQxUbxJj0ERz6HOM338g12EU/BmLCDjtz3Y
+ydJ94RUuxLwuk0BedBk816wLMWjgOQd3/Eb7msud3mA
+--- pM8bV+881Kh2Rpizrmaa/JzzvNXtKRTRU1KyFw9qtaQ
+:Ã쀬ÿxÕþ,ʅ梞ÔYk0+1‚ÂZÏOIq@ÛY”¼Ô¡Ö±2T³J
Å©Ž¤*Íýù!%¹…cüýcšò<C5A1>Yq<RÕF ²ù±^Ú+éf Ý

modules/nixos/services/mail/sec/webmaster-pw.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 CtmR6w s2FYa/CFw32d95iUrKgwFbvMtNe+17vDYLzCRJaBumA
+YgQyjn/bkEN6bH7VSlrN4xT/epITxj8NnPsalOz4ndU
+-> ssh-ed25519 +be3hg BkNhJbmWJHREV54OnrDzA7ep8h2ZzVtzh+Ns6Es1jQ4
+eepXxHwYgVZN56nuCisQuy+PHRjz+/NrJfVdqaAAMRE
+--- wyDX4yv5LbYhCvxIiK+wzndFlBs5AdV/FgNC+MRHAO8
+<EFBFBD>wVX=ó|¹éì
@ß3ŒÜr‘”tÅÇ™sWl&ón»
+¿Ù¿4“‹T&ÁÅJ"‚<Ë;רGYò-Dp@1Á<31>Î@ò»º_š9µÎ‡³ÌUû×™™ )•üb"