Started working on mail server

hosts/lapserv/default.nix

@@ -5,7 +5,7 @@
 
   niksos = {
     server = true;
-    graphics.nvidia = true;
+    graphics.nvidia = false; #FIXME: Compile error
     graphics.intel = true;
   };
 

secrets/cloudflare-acme.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 WCPLrA Qx18plLxh4puHXEbGkSllUYdHTRHTuzWSVa9+a8LTjs
+rbvHgdQQO/3zRqltjrhRwlTG3Qxh229XDiMdowY6eOQ
+-> ssh-ed25519 7/ziYw 8E2YjDNyz0nDtzU4DsDKfZVsysDT1PSi5vlbRS81cVY
+Y9e+Ijs9/3v9UjKA2QEbC+YO2cAk5akTeFpTqHztq+4
+-> ssh-ed25519 GQzYWA fwQu2OX+NcgABahCmRoRgndjyKXKk2oJ9XUnC3VSVjM
+hkF10T5hipEPyBv/aeoqv/Ti7wvcTRE7MgrGZsXPiFc
+-> ssh-ed25519 MfR7VA nEFPMwy5muKAQMKKgS+zfMmaHR2yxNWnEfgXJQUnEjA
+fDj5QT/NTitdVH4u99ht3SBoLM/6OiX4oAGbHYH+9bY
+--- 37290H3ViuAvNz1Y/gpmHDlYQ0Hg5q1tCQmjgFtKwQc
+Š½Ëð¨kF÷Ë¥5un<75>nõ˜0skfH˜¼ðÓF£ŸR¬½tna<6E>ç¥Ñûî8ð)µ#zÛ`B<>›Û„sI :5Æ[È*h

secrets/default.nix

@@ -19,5 +19,6 @@
         then config.services.matrix-continuwuity.user
         else "root";
     };
+    cloudflare-acme.file = ./cloudflare-acme.age;
   };
 }

secrets/secrets.nix

@@ -11,4 +11,5 @@ in {
   "password.age".publicKeys = systems;
   "dcbot.age".publicKeys = systems;
   "matrix-registration.age".publicKeys = systems;
+  "cloudflare-acme.age".publicKeys = systems;
 }

system/server/default.nix

@@ -1,4 +1,4 @@
 {lib, ...}: {
-  imports = [./caddy.nix ./transfer-sh.nix ./seafile.nix ./bot.nix ./immich.nix ./matrix.nix];
+  imports = [./caddy.nix ./transfer-sh.nix ./seafile.nix ./bot.nix ./immich.nix ./matrix.nix ./mail.nix];
   options.niksos.server = lib.mkEnableOption "server servcies (such as caddy)."; #TODO: per service option.
 }

system/server/mail.nix

@@ -0,0 +1,87 @@
+{config, ...}: {
+  services.stalwart-mail = {
+    enable = true;
+    openFirewall = true;
+    settings = {
+      server = {
+        hostname = "mx1.jsw.tf";
+        tls = {
+          enable = true;
+          implicit = true;
+        };
+        listener = {
+          smtp = {
+            protocol = "smtp";
+            bind = "[::]:25";
+          };
+          submissions = {
+            bind = "[::]:465";
+            protocol = "smtp";
+          };
+          imaps = {
+            bind = "[::]:993";
+            protocol = "imap";
+          };
+          jmap = {
+            bind = "[::]:8080";
+            url = "https://mail.jsw.tf";
+            protocol = "jmap";
+          };
+          management = {
+            bind = ["127.0.0.1:8080"];
+            protocol = "http";
+          };
+        };
+      };
+      lookup.default = {
+        hostname = "mx1.jsw.tf";
+        domain = "jsw.tf";
+      };
+      acme."letsencrypt" = {
+        directory = "https://acme-v02.api.letsencrypt.org/directory";
+        challenge = "dns-01";
+        contact = "jswmail@proton.me";
+        domains = ["jsw.tf" "mx1.jsw.tf"];
+        provider = "cloudflare";
+        secret = "%{file:${config.age.secrets.cloudflare-acme.path}}%";
+      };
+      session.auth = {
+        mechanisms = "[plain]";
+        directory = "'in-memory'";
+      };
+      storage.directory = "in-memory";
+      session.rcpt.directory = "'in-memory'";
+      queue.outbound.next-hop = "'local'";
+      directory."imap".lookup.domains = ["jsw.tf"];
+      # directory."in-memory" = {
+      #   type = "memory";
+      #   principals = [
+      #     {
+      #       class = "individual";
+      #       name = "User 1";
+      #       secret = "%{file:/etc/stalwart/mail-pw1}%";
+      #       email = [""];
+      #     }
+      #   ];
+      # };
+      authentication.fallback-admin = {
+        user = "admin";
+        secret = "%{file:${config.age.secrets.password.path}}%";
+      };
+    };
+  };
+
+  services.caddy.virtualHosts = {
+    "webadmin.jsw.tf" = {
+      extraConfig = ''
+        reverse_proxy http://127.0.0.1:8080
+      '';
+      serverAliases = [
+        "mta-sts.example.org"
+        "autoconfig.example.org"
+        "autodiscover.example.org"
+        "mail.example.org"
+      ];
+    };
+  };
+}

system/server/seafile.nix

@@ -6,7 +6,7 @@
 }: {
   services.seafile = {
     enable = config.niksos.server;
-    seahubPackage = inputs.nixpkgs-stable.legacyPackages.${pkgs.system}.seahub;
+    seahubPackage = inputs.nixpkgs.legacyPackages.${pkgs.system}.seahub;
 
     adminEmail = "jurnwubben@gmail.com";
     initialAdminPassword = "ChangeMeTheFuckNow!";