nixos/stalwart-mail: utilize lib.getExe

This commit is contained in:
oddlama
2025-05-27 20:42:06 +02:00
parent 69ae3ba1f6
commit 1069853a49
@@ -162,7 +162,7 @@ in
serviceConfig = {
ExecStart = [
""
"${cfg.package}/bin/stalwart-mail --config=${configFile}"
"${lib.getExe cfg.package} --config=${configFile}"
];
LoadCredential = lib.mapAttrsToList (key: value: "${key}:${value}") cfg.credentials;
@@ -175,6 +175,10 @@ in
CacheDirectory = "stalwart-mail";
StateDirectory = "stalwart-mail";
# Upstream uses "stalwart" as the username since 0.12.0
User = "stalwart-mail";
Group = "stalwart-mail";
# Bind standard privileged ports
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];