rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-17 02:12:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add mail changes

Browse Source
This commit is contained in:
Ruben Hensen
2026-03-21 23:30:03 +01:00
parent 264ce4c85b
commit 7a151c0a2d
3 changed files with 80 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nix-infra-machine/nodes/node001.nix
+5 -2
View File
@@ -119,11 +119,13 @@
tls.enable = false;
base-dn = "DC=ldap,DC=goauthentik,DC=io";
bind.dn = "cn=ldapservice,ou=users,DC=ldap,DC=goauthentik,DC=io";
bind.secret = "%{file:/run/credentials/stalwart-mail.service/ldap_bind_password}%";
bind.auth.method = "lookup";
filter = {
name = "(&(objectClass=user)(cn=?))";
email = "(&(objectClass=user)(|(mail=?)(mailAlias=?)))";
name = "(&(objectClass=user)(|(cn=?)(mail=?)))";
email = "(&(objectClass=user)(mail=?))";
};
attributes = {
@@ -143,6 +145,7 @@
systemd.services.stalwart-mail.serviceConfig.LoadCredentialEncrypted = [
"stalwart-admin-password:/root/secrets/[%%secrets/stalwart-admin-password%%]"
"ldap_bind_password:/root/secrets/[%%secrets/ldap_bind_password%%]"
];
users.users.stalwart-mail.extraGroups = [ "acme" ];