servers/mermet/rspamd/sourcephile.fr.nix

   1 { pkgs, lib, config, ... }:
   2 let
   3   inherit (builtins.extraBuiltins) pass;
   4   inherit (config.services) rspamd;
   5   domain = "sourcephile.fr";
   6   selector = "20200101";
   7 in
   8 {
   9 deployment.keys."dkim.${domain}.${selector}.key" = {
  10   text  = pass "dkim/${domain}/${selector}.key";
  11   user  = rspamd.user;
  12   group = "root";
  13   destDir = "/run/keys/";
  14   permissions = "0400";
  15 };
  16 systemd.services.rspamd.after =
  17  [ "dkim.${domain}.${selector}.key-key.service" ];
  18 services.rspamd.dkimSelectorMap = ''
  19   mermet    ${selector}
  20   ${domain} ${selector}
  21 '';
  22 services.nsd.zones."${domain}".data = ''
  23   ${selector}._domainkey IN TXT ( "v=DKIM1; k=rsa; "
  24     "p=MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7EKzverbG+5JF+yFjH3MrxLyauiHyLqBbV/8LEMunoKXF8sqhBpQtAQXruLqsyUkxR/4CAyPMyzmcdrU43boMj9yFqLrg/kEz2RIvai9jXBqRoWRW1y7F0LbZmdtOTncuDSP8Zzo02XUzsOC4f/C3tEQHS5rc"
  25     "hzfhU5FY1CeO6eBMV79qKBOvGMKahQTrrtU6olAAJxOhn6wRuwSf"
  26     "+m3on1OqiuXYYIgNHKdRhJ8gDwIm/3LEpYMD0gTgJiyclCLoLGHGtKZy1Wf9xV9/7V6fHE4JW5SDivwslVTL+KPXOlIpo5NDHpMxPYOcIg2K4Rj/j7jhavo+fG43q1LhwaPkEMQMbplgnjeMY8300odRiklTkMMpH0m35ZNeHQJSRpEtV8y5xUNxVaGzfqX5iStwV/mQ1Kn"
  27     "ZSe8ORTNq+eTTFnDk6zdUXjagcf0wO6QsSTeAz/G8CqOBbwmrU+q"
  28     "F8WbGAeRnhz51mH6fTTfsQ1nwjAiF4ou+eQGTkTMN23KkCKpuozJnxqx4DCEr6J1bL83fhXw7CgcfgKgTOk/HFJpeiGhqodw18r4DWBA6G57z9utm7Mr/9SoVnMq6iK9iEcbCllLR8Sz4viatLSRzhodbk7hfvXS3jmCFjILAjFmA7aMTemDMBDQhpAGF9F8sjFUbEJIZjK"
  29     "rWWtSTdO8DilDqN8CAwEAAQ=="
  30   )
  31 '';
  32 }