From e0308144468a25644ee59c9ea7c90ee424419e99 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Tue, 29 Jul 2025 04:39:05 +0200 Subject: [PATCH] nixos/tlsrpt: configure explicit http_script Make sure we get curl into the system, since when the tlsrpt rua is an HTTP URL we need to be able to deliver to that. --- nixos/modules/services/mail/tlsrpt.nix | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/nixos/modules/services/mail/tlsrpt.nix b/nixos/modules/services/mail/tlsrpt.nix index 309ce400462c..843e1477d7e0 100644 --- a/nixos/modules/services/mail/tlsrpt.nix +++ b/nixos/modules/services/mail/tlsrpt.nix @@ -222,6 +222,17 @@ in ''; }; + http_script = mkOption { + type = with types; nullOr str; + default = "${lib.getExe pkgs.curl} --silent --header 'Content-Type: application/tlsrpt+gzip' --data-binary @-"; + defaultText = lib.literalExpression '' + ''${lib.getExe pkgs.curl} --silent --header 'Content-Type: application/tlsrpt+gzip' --data-binary @- + ''; + description = '' + Call to an HTTPS client, that accepts the URL on the commandline and the request body from stdin. + ''; + }; + sender_address = mkOption { type = types.str; example = "noreply@example.com";