853 Commits
Author SHA1 Message Date
Martin Weinelt 3758224be3 rspamd: try migrating to pcre2 again
The crashes happened in 2022 and now we are yanking pcre1, so we need to
try.
2026-07-23 21:09:36 +02:00
Aleksei Zolotov 5342f797d6 nixos/stalwart: Fix broken Stalwart documentation link in configuration 2026-07-18 13:08:37 +02:00
Martin Weinelt 9986a19f6c postsrsd: 2.0.11 -> 2.2.7
https://github.com/roehling/postsrsd/blob/2.2.7/CHANGELOG.rst
2026-07-12 01:29:41 +02:00
Martin Weinelt f547405d88 nixos/postfix-tlspol: migrate to socket activation
Allows further confining the service. Socket activation is not supported
for the metrics-address.
2026-07-05 23:05:34 +02:00
Martin WeineltandGitHub 6108877b37 nixos/dovecot: place globals first in rendered config (#526068) 2026-06-27 09:19:05 +00:00
Nick CaoandGitHub ba9c52daaf nixos/maddy: allow string paths for secrets to support optional EnvironmentFiles (#532602) 2026-06-18 18:05:52 +00:00
Tim van Herpen 09ff9915ad nixos/maddy: allow string paths for secrets to support optional EnvironmentFiles 2026-06-17 10:21:15 +02:00
Jappie3andKatalin Rebhan baf28478fc nixos/dovecot: order non-attrs values first in rendered config
Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2026-06-12 23:25:11 +02:00
euxane 4966604cc8 stalwart: remove euxane from maintainers 2026-06-09 07:14:37 +02:00
provokateurin 546e8cadac nixos/stalwart: Allow AF_UNIX address family for journal tracer 2026-05-29 15:59:39 +02:00
Alyssa RossandGitHub 9488f36f15 nixos/i18n: fix eval for non-glibc systems (e.g. musl) (#514825) 2026-05-18 09:42:55 +00:00
Maximilian BoschandGitHub 4ad7c2e156 roundcube: 1.6.15 -> 1.7.0 (#520143) 2026-05-16 13:54:56 +00:00
Maximilian BoschandGitHub cfd61f84d3 nixos/roundcube: set nginx client_max_body_size for attachments (#513049) 2026-05-14 16:44:04 +00:00
Maximilian Bosch 3f732679b8 nixos/roundcube: use php 8.4 2026-05-14 18:25:21 +02:00
Maximilian Bosch f449f1bac5 roundcube: 1.6.15 -> 1.7.0
ChangeLog: https://github.com/roundcube/roundcubemail/releases/tag/1.7.0
2026-05-14 18:23:48 +02:00
Colin cce4239d68 nixos/i18n: fix eval for non-glibc systems (e.g. musl)
`pkgs.glibcLocales` is null for musl systems, so
`options.i18n.glibcLocales` needs to also be nullable.
otherwise, the `.override` and subsequence path interpolations
fail for non-gnu systems.
2026-05-07 17:35:58 +00:00
Michael Daniels 2e87c2f8f4 nixos/*: remove unused let bindings
Generated using deadnix (with some manual work); split from #514611.
2026-05-01 20:39:14 -04:00
Ameer Taweel 988be666ac nixos/maddy: remove absolute path literals 2026-04-25 01:44:05 +03:00
Arnout Engelen 0afa9278be nixos/roundcube: set nginx client_max_body_size for attachments
Fixes #506235

This was attempted earlier in #506239 but AFAICT that
was the wrong place (nginx precedence rules are tricky).
2026-04-24 12:42:19 +02:00
ElnuDev 0f8dab97c9 roundcube: don't hard-code nginx user in service 2026-04-16 20:44:39 -07:00
Martin WeineltandGitHub 846674aeb2 nixos/dovecot: hotfix config defaults for sieve-less setups (#509558) 2026-04-13 23:06:27 +00:00
Katalin Rebhan aea389e00d nixos/dovecot: define options for config and storage version
dovecot_config_version and dovecot_storage_version are accessed by
the module, so should at least have a default set so that assertions
eval correctly.
2026-04-13 21:41:44 +02:00
Katalin Rebhan cf431ef62b nixos/dovecot: hotfix config defaults for sieve-less setups
The sieve_script_bin_path setting can only be set when the plugin is
loaded, so on sieve-less setups dovecot will refuse to start since
sieve_script_bin_path is an invalid setting. Don't set it there.
2026-04-13 15:26:45 +02:00
Martin WeineltandGitHub 0a609f30ca nixos/dovecot: add settings option (RFC42), redux (#500271) 2026-04-12 19:30:13 +00:00
Katalin Rebhan 400aecc29b nixos/dovecot: remove defaults for PAM and mail driver/path 2026-04-11 01:11:34 +02:00
Katalin Rebhan 8df2a9cbab nixos/dovecot: define module defaults as options 2026-04-11 01:11:34 +02:00
Jappie3andKatalin Rebhan d49db5bd96 nixos/dovecot: add compatibility for Dovecot 2.4
Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2026-04-11 01:11:33 +02:00
Jappie3andKatalin Rebhan ad56a1d988 nixos/dovecot: add settings option (RFC42)
Co-authored-by: Katalin Rebhan <me@dblsaiko.net>
2026-04-11 01:11:33 +02:00
Maximilian BoschandGitHub eb77aa3ce2 nixos/roundcube: increase client_max_body_size for maxAttachmentSize (#506239) 2026-04-06 15:05:11 +00:00
Axel Karjalainen 28a9274f56 nixos/stalwart: document changing defaults to fix doc build 2026-04-04 20:04:50 +03:00
Axel Karjalainen bfd7ffcf08 nixos/stalwart: switch logging from stdout to journal
journald's centralized logging has many advantages:
- External centralized logging can simply source from journald
- journald's auto-vacuum options (e.g. SystemMaxUse) can make sure logs
  don't take up too much space
- Logs are in a single timeline, which is useful for analysis
2026-04-04 20:04:10 +03:00
Axel Karjalainen 75742d265e nixos/stalwart: add module-specific stateVersion and clean up 2026-04-04 20:02:21 +03:00
Luna Simons d965362c0d nixos/roundcube: increase client_max_body_size for maxAttachmentSize 2026-04-03 10:22:59 +02:00
Martin Weinelt 77bf0b01d0 nixos/tlsrpt: reuse sender address as envelope sender
This prevents leaking the local user and hostname into the envelope,
which could prevent DKIM signing due to lack of keys for the MX hostname.
2026-03-07 16:11:59 +01:00
SandroandGitHub 5a38d3c050 opensmtpd: fix offline enqueueing (#491938) 2026-03-01 03:42:39 +00:00
Peter SimonsandGitHub 4f63959d17 nixos/rspamd: Add extraArgs option to rspamd module (#484133) 2026-02-25 20:39:32 +00:00
Roman Stein 39105a7501 nixos/rspamd: Add extraArgs option to rspamd module
Add extraArgs option to pass additional command-line arguments to rspamd, allowing variables to be defined for use in UCL configuration files.
2026-02-25 21:26:07 +01:00
Maximilian BoschandGitHub 593e2fe858 nixos/roundcube: fix missing pspell dictionaries during setup (#478198) 2026-02-21 13:31:19 +00:00
Ricardo CorreiaandSandro 89223af8fe opensmtpd: fix offline enqueueing
Note: for it to work correctly, it requires `services.opensmtpd.setSendmail` is
set to true.

Fixes #255691

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2026-02-19 12:51:11 +00:00
Darren Rambaud 12c3b561df nixos/stalwart: add guards
* if `cfg.user` or `cfg.group` are set, can safely assume operator will
  take care of creating the user/group
* add fallback guard for `SyslogIdentifier`

Related to:
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2751960797
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2751961935
2026-02-01 16:46:01 -06:00
Darren Rambaud 6cd9ce753d nixos/stalwart: add fallback to /var/cache/stalwart-mail
* update test to account for fallback
2026-01-28 23:51:51 -06:00
Darren Rambaud 7457ecf7bb nixos/stalwart: improve code
* address review comments:
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2719419333
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2719421199
2026-01-28 23:51:50 -06:00
Darren Rambaud 7d08d5257b nixos/stalwart: update setting description
* address review comment:
 https://github.com/NixOS/nixpkgs/pull/481815/files#r2706718725
2026-01-28 23:51:48 -06:00
Darren Rambaud 9dc7450f47 stalwart: remove refs to stalwart-mail
* re-name systemd service
* update test
2026-01-28 23:51:47 -06:00
Darren Rambaud f80dce8801 module/stalwart: add guards against data loss
* if `stateVersion` < 26.05, will fallback to previous defaults
* add new options to configure `user:group` ownership of service
* address review comments:
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710218047
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710223058
2026-01-28 23:51:45 -06:00
Darren Rambaud aeb0bffd38 docs/release-notes: remove links to renamed services.stalwart-mail option
* revert changes to previous version minus links to older option
* address review comments:
 https://github.com/NixOS/nixpkgs/pull/481815#pullrequestreview-3680300529
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2706711813
 https://github.com/NixOS/nixpkgs/pull/481815#discussion_r2710242153
2026-01-28 23:50:52 -06:00
Dyego Aurélio 28096cc5e3 treewide: apply nixfmt 1.2.0 2026-01-22 18:37:56 -03:00
h7x4 c6708d9bda various: replace systemd.services.<name>.{script,preStart} with ExecStart{,Pre}
This is a partial revert of 39e9380
2026-01-19 14:45:11 +09:00
NAHO a2ed7e8d88 nixos: remove optional builtins prefixes from prelude functions
Remove optional builtins prefixes from prelude functions by running:

    builtins=(
      abort
      baseNameOf
      break
      derivation
      derivationStrict
      dirOf
      false
      fetchGit
      fetchMercurial
      fetchTarball
      fetchTree
      fromTOML
      import
      isNull
      map
      null
      placeholder
      removeAttrs
      scopedImport
      throw
      toString
      true
    )

    fd \
      --exclude doc/manual/release-notes \
      --type file \
      . \
      nixos \
      --exec-batch sed --in-place --regexp-extended "
        s/\<builtins\.($(
          printf '%s\n' "${builtins[@]}" |
            paste --delimiter '|' --serial -
        ))\>/\1/g
      "

    nix fmt
2026-01-15 16:07:55 +01:00
Leona Maroni d54a686bba treewide: Take over maintainership from the flyingcircus team
The flyingcircus team was dissolved as it's an external team.
We (osnyx and me) take over maintainersip as persons.
2026-01-12 15:48:18 +01:00