depot/cluster/services/mail/opendkim.nix

16 lines
360 B
Nix
Raw Normal View History

2023-08-31 01:55:45 +03:00
{ lib, depot, ... }:
2021-10-16 21:22:48 +03:00
let
2023-08-31 01:55:45 +03:00
inherit (depot.lib.meta) domain;
2021-10-16 21:22:48 +03:00
in
{
services.opendkim = {
enable = true;
selector = domain;
domains = domain;
};
# ensure socket becomes group-writable
systemd.services.opendkim.serviceConfig.UMask = lib.mkForce "0007";
# TODO: figure out which one works
users.users.postfix.extraGroups = [ "opendkim" ];
}