servers/mermet/public-inbox.nix

   1 { pkgs, lib, config, ... }:
   2 let inherit (config.users) groups;
   3     domain = "sourcephile.fr";
   4 in
   5 {
   6 services.public-inbox = {
   7   enable = true;
   8   path = with pkgs; [ /*spamassassin*/ ];
   9   #mda.args = [ "--no-precheck" ];
  10   mda.spamCheck = null;
  11   watch.spamCheck = null;
  12
  13   #config.publicinbox.css =
  14   #  [ "href=https://${domain}/lists/public-inbox.css" ];
  15
  16   http.mounts = [
  17     "https://${domain}/lists"
  18     "https://public-inbox.${domain}/lists"
  19   ];
  20   wwwListing = "match=domain";
  21
  22   nntpServer = [ "nntps://news.${domain}" ];
  23   nntp.cert = "/var/lib/acme/${domain}/fullchain.pem";
  24   nntp.key = "/var/lib/acme/${domain}/key.pem";
  25   nntp.extraGroups = [ groups.acme.name ];
  26
  27   inboxes = {
  28     equipage = {
  29       address = [
  30         "public-inbox+equipage@${domain}"
  31         "equipage@${domain}"
  32       ];
  33       description = "Équipage";
  34       url = "https://${domain}/mails/archives/equipage";
  35       newsgroup = "inbox.comp.sourcephile.equipage";
  36       #config.coderepo = [ "sourcephile" ];
  37     };
  38     linky = {
  39       address = [
  40         "public-inbox+linky@${domain}"
  41         "linky@public-inbox.${domain}"
  42       ];
  43       description = "Discussions publiques à propos du compteur Linky";
  44       url = "https://public-inbox.${domain}/archives/linky";
  45       newsgroup = "inbox.comp.sourcephile.linky";
  46       #config.coderepo = [ "sourcephile" ];
  47     };
  48   };
  49
  50   /*
  51   config.coderepo.sourcephile-nix = {
  52     dir = "/var/lib/git/repositories/sourcephile.git";
  53     cgitUrl = "https://${domain}/git/sourcephile";
  54   };
  55   */
  56 };
  57 security.acme.certs."${domain}" = {
  58   postRun = "systemctl reload public-inbox-nntp";
  59 };
  60 systemd.services.public-inbox = {
  61   wants = [ "acme-selfsigned-${domain}.service" "acme-${domain}.service"];
  62   after = [ "acme-selfsigned-${domain}.service" ];
  63 };
  64 }