public/mail-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Try enabling SSSD

Browse Source
This commit is contained in:
niten
2023-10-01 14:51:39 -07:00
parent 66128a5cd2
commit 2a46e1bfe3
2 changed files with 55 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mail-server.nix
+13
View File
@@ -199,6 +199,18 @@ in {
target-file = "/run/ldap-proxy/env";
};
dovecotSssdEnv = {
source-file = pkgs.writeText "dovecot-sssd.env" (concatStringsSep "\n" [
"SSSD_LDAP_SERVER=ldap://ldap-proxy:3389/"
"SSSD_LDAP_SEARCH_BASE=${cfg.ldap.base}"
"SSSD_LDAP_USER_SEARCH_BASE=${cfg.ldap.user-ou},${cfg.ldap.base}"
"SSSD_LDAP_GROUP_SEARCH_BASE=${cfg.ldap.group-ou},${cfg.ldap.base}"
"SSSD_LDAP_BIND_DN=${cfg.ldap.bind-dn}"
"SSSD_LDAP_AUTH_TOKEN=${readFile cfg.ldap.bind-password-file}"
]);
target-file = "/run/dovecot-secret/sssd.env";
};
dovecotLdapConfig = {
source-file = pkgs.writeText "dovecot-ldap.conf"
(concatStringsSep "\n" [
@@ -321,6 +333,7 @@ in {
"${cfg.imap.ssl-directory}:/run/certs/imap"
"${cfg.state-directory}/dovecot-dhparams:/var/lib/dhparams"
"${cfg.state-directory}/mail:/mail"
"${hostSecrets.dovecotSssdEnv}:/run/dovecot-secrets/sssd.env"
];
depends_on = [ "antispam" "ldap-proxy" ];
};