mail working

system/web-server/mail.nix

@@ -27,34 +27,6 @@ in {
   };
   users.users.postfix.extraGroups = [ "opendkim" ];
 
-
-  services.nginx = {
-    enable = true;
-    virtualHosts = {
-      "ktiu.net" = {
-        forceSSL = true;
-        enableACME = true;
-        locations."/" = {
-          return = "200 'This domain used for e-mail hosting only.'";
-          extraConfig = ''
-            add_header Content-Type text/plain;
-          '';
-        };
-      };
-      "${config.networking.fqdn}" = {
-        addSSL = true;
-        enableACME = true;
-        locations."/.well-known/acme-challenge" = {
-          root = "/var/lib/acme/.challenges";
-        };
-        locations."/" = {
-          # return = "301 http://${config.networking.domain}";
-          return = "404";
-        };
-      };
-    };
-  };
-
   security.acme.certs."${config.networking.fqdn}-postfix" = {
     domain = config.networking.fqdn;
     webroot = "/var/lib/acme/.challenges";
@@ -63,28 +35,35 @@ in {
 
   services.postfix = {
     enable = true;
-    domain = "ktiu.net";
-    origin = "ktiu.net";
-    hostname = "arielle.ktiu.net";
-    destination = [
-      "ktiu.net"
-      "mail.ktiu.net"
-      "t9e.me"
-      "localhost"
-      "localhost.localdomain"
-    ];
+    domain = config.networking.domain;
+    hostname = config.networking.fqdn;
     virtual = ''
-      @ktiu.net till
-      @t9e.me till
-      till till
+      @ktiu.net till@t9e.me
+      @t9e.me till@t9e.me
     '';
-    networks = [ "127.0.0.0/8" "[::ffff:127.0.0.0]/104" "[::1]/128" ];
-    sslKey = config.security.acme.certs."${config.networking.fqdn}-postfix".directory + "/key.pem";
-    sslCert = config.security.acme.certs."${config.networking.fqdn}-postfix".directory + "/cert.pem";
+
+    mapFiles.virtual-mailboxes = pkgs.writeText "postfix-virtual-mailboxes" ''
+      @ktiu.net anything
+      @t9e.me anything
+    '';
+
     config = {
+      virtual_mailbox_domains = [ "t9e.me" "ktiu.net" ];
+      virtual_mailbox_maps = "hash:/etc/postfix/virtual-mailboxes";
+      virtual_transport = "lmtp:unix:/var/run/dovecot2/lmtp";
       smtpd_tls_security_level = "may";
       smtpd_milters = [ "unix:/run/opendkim/opendkim.sock" ];
     };
+
+    networks = [
+      "127.0.0.0/8"
+      "[::ffff:127.0.0.0]/104"
+      "[::1]/128"
+    ];
+
+    sslKey = config.security.acme.certs."${config.networking.fqdn}-postfix".directory + "/key.pem";
+    sslCert = config.security.acme.certs."${config.networking.fqdn}-postfix".directory + "/cert.pem";
+
     enableSubmission = true;
     submissionOptions = {
       milter_macro_daemon_name = "ORIGINATING";
@@ -97,6 +76,7 @@ in {
       smtpd_client_restrictions = "permit_mynetworks,permit_sasl_authenticated,reject";
       smtpd_recipient_restrictions = "reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject";
     };
+
     masterConfig = {
       "submission-header-cleanup" = {
         type = "unix";
@@ -115,6 +95,12 @@ in {
     group = config.services.dovecot2.group;
   };
 
+  users.groups."vmail" = {};
+  users.users."vmail" = {
+    group = "vmail";
+    isSystemUser = true;
+  };
+
   services.dovecot2 = {
     enable = true;
     sslServerKey = config.security.acme.certs."${config.networking.fqdn}-dovecot".directory + "/key.pem";
@@ -126,6 +112,11 @@ in {
       Trash = { specialUse = "Trash"; auto = "subscribe"; };
       Archive = { specialUse = "Archive"; auto = "subscribe"; };
     };
+    mailUser = "vmail";
+    mailGroup = "vmail";
+    enablePAM = false;
+    enableLmtp = true;
+    mailLocation = "maildir:/var/spool/mail/vmail/mailboxes/%u";
     extraConfig = ''
       ssl = required
       service auth {
@@ -135,6 +126,22 @@ in {
           group = postfix
         }
       }
+      passdb {
+        driver = passwd-file
+        args = /var/custom-access/dovecot.passwd
+      }
+      userdb {
+        driver = passwd-file
+        args = /var/custom-access/dovecot.passwd
+        default_fields = uid=vmail gid=vmail home=/var/spool/mail/vmail/users/%u
+      }
+      service lmtp {
+        unix_listener lmtp {
+          group = postfix
+          mode = 0600
+          user = postfix
+        }
+      }
     '';
   };