diff options
author | Nikolay Amiantov <ab@fmap.me> | 2016-01-07 04:17:42 +0300 |
---|---|---|
committer | Nikolay Amiantov <ab@fmap.me> | 2016-01-13 13:08:55 +0300 |
commit | b4179c56124b7fca8280271c806f3482cd8c3ab1 (patch) | |
tree | 0955b5d6b213f79e0f2ab65ca5f9386979ad4320 /nixos | |
parent | f5835ce77f75da92309153d899b1f17500b6765b (diff) | |
download | nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.tar nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.tar.gz nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.tar.bz2 nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.tar.lz nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.tar.xz nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.tar.zst nixlib-b4179c56124b7fca8280271c806f3482cd8c3ab1.zip |
nixos/dspam: add module
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/misc/ids.nix | 2 | ||||
-rw-r--r-- | nixos/modules/module-list.nix | 1 | ||||
-rw-r--r-- | nixos/modules/services/mail/dspam.nix | 147 |
3 files changed, 150 insertions, 0 deletions
diff --git a/nixos/modules/misc/ids.nix b/nixos/modules/misc/ids.nix index 83c5fde829f1..f24afccb405a 100644 --- a/nixos/modules/misc/ids.nix +++ b/nixos/modules/misc/ids.nix @@ -243,6 +243,7 @@ ejabberd = 219; postsrsd = 220; opendkim = 221; + dspam = 222; # When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399! @@ -463,6 +464,7 @@ ejabberd = 219; postsrsd = 220; opendkim = 221; + dspam = 222; # When adding a gid, make sure it doesn't match an existing # uid. Users and groups with the same name should have equal diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix index 41389c711121..b2f08feb1082 100644 --- a/nixos/modules/module-list.nix +++ b/nixos/modules/module-list.nix @@ -183,6 +183,7 @@ ./services/logging/syslogd.nix ./services/logging/syslog-ng.nix ./services/mail/dovecot.nix + ./services/mail/dspam.nix ./services/mail/exim.nix ./services/mail/freepops.nix ./services/mail/mail.nix diff --git a/nixos/modules/services/mail/dspam.nix b/nixos/modules/services/mail/dspam.nix new file mode 100644 index 000000000000..10352ba6abcc --- /dev/null +++ b/nixos/modules/services/mail/dspam.nix @@ -0,0 +1,147 @@ +{ config, lib, pkgs, ... }: + +with lib; + +let + + cfg = config.services.dspam; + + dspam = pkgs.dspam; + + defaultSock = "/run/dspam/dspam.sock"; + + cfgfile = pkgs.writeText "dspam.conf" '' + Home /var/lib/dspam + StorageDriver ${dspam}/lib/dspam/lib${cfg.storageDriver}_drv.so + + Trust root + Trust ${cfg.user} + SystemLog on + UserLog on + + ${optionalString (cfg.domainSocket != null) ''ServerDomainSocketPath "${cfg.domainSocket}"''} + + ${cfg.extraConfig} + ''; + +in { + + ###### interface + + options = { + + services.dspam = { + + enable = mkOption { + type = types.bool; + default = false; + description = "Whether to enable the dspam spam filter."; + }; + + user = mkOption { + type = types.str; + default = "dspam"; + description = "User for the dspam daemon."; + }; + + group = mkOption { + type = types.str; + default = "dspam"; + description = "Group for the dspam daemon."; + }; + + storageDriver = mkOption { + type = types.str; + default = "hash"; + description = "Storage driver backend to use for dspam."; + }; + + domainSocket = mkOption { + type = types.nullOr types.path; + default = defaultSock; + description = "Path to local domain socket which is used for communication with the daemon. Set to null to disable UNIX socket."; + }; + + extraConfig = mkOption { + type = types.lines; + default = ""; + description = "Additional dspam configuration."; + }; + + maintenanceInterval = mkOption { + type = types.nullOr types.str; + default = null; + description = "If set, maintenance script will be run at specified (in systemd.timer format) interval"; + }; + + }; + + }; + + + ###### implementation + + config = mkIf cfg.enable (mkMerge [ + { + users.extraUsers = optionalAttrs (cfg.user == "dspam") (singleton + { name = "dspam"; + group = cfg.group; + uid = config.ids.uids.dspam; + }); + + users.extraGroups = optionalAttrs (cfg.group == "dspam") (singleton + { name = "dspam"; + gid = config.ids.gids.dspam; + }); + + environment.systemPackages = [ dspam ]; + + environment.etc."dspam/dspam.conf".source = cfgfile; + + systemd.services.dspam = { + description = "dspam spam filtering daemon"; + wantedBy = [ "multi-user.target" ]; + restartTriggers = [ cfgfile ]; + + serviceConfig = { + ExecStart = "${dspam}/bin/dspam --daemon --nofork"; + User = cfg.user; + Group = cfg.group; + RuntimeDirectory = optional (cfg.domainSocket == defaultSock) "dspam"; + PermissionsStartOnly = true; + }; + + preStart = '' + mkdir -m750 -p /var/lib/dspam + chown -R "${cfg.user}:${cfg.group}" /var/lib/dspam + + mkdir -m750 -p /var/log/dspam + chown -R "${cfg.user}:${cfg.group}" /var/log/dspam + ''; + }; + } + + (mkIf (cfg.maintenanceInterval != null) { + systemd.timers.dspam-maintenance = { + description = "Timer for dspam maintenance script"; + wantedBy = [ "timers.target" ]; + timerConfig = { + OnCalendar = cfg.maintenanceInterval; + Unit = "dspam-maintenance.service"; + }; + }; + + systemd.services.dspam-maintenance = { + description = "dspam maintenance script"; + restartTriggers = [ cfgfile ]; + + serviceConfig = { + ExecStart = "${dspam}/bin/dspam_maintenance"; + Type = "oneshot"; + User = cfg.user; + Group = cfg.group; + }; + }; + }) + ]); +} |