Commit 29e522f5 authored by fpletz's avatar fpletz 🚧
Browse files

add postfix exporter & small improvements

parent d556140d
......@@ -42,7 +42,10 @@ with lib;
environment.systemPackages = with pkgs; [ mailutils ];
services.kresd.enable = true;
services.kresd = {
enable = true;
listenPlain = [ "127.0.0.1:53" "[::1]:53" ];
};
services.redis.enable = true;
......@@ -137,18 +140,20 @@ with lib;
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_ciphers = high
smtp_tls_exclude_ciphers = aNULL, MD5, RC4, 3DES, DES, PSK, DSS, SRP, ADH, AECDH
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_address_preference = ipv6
'';
};
services.prometheus.exporters.postfix.enable = true;
users.users.postfix-exporter.extraGroups = [ "systemd-journal" ];
#services.mailman = {
# enable = false;
# siteOwner = "root@briafzentrum.muc.ccc.de";
# fromEmail = "mailman@briafzentrum.muc.ccc.de";
# hyperkittyApiKey = "5kp5ToC6NkkdpEUhnQGCc1w5MjSOShM11N7aY2WfCbtdZr8eY6aq4rUFsYSUxJwy";
# webSecretKey = "8oiuCEWbDYk27yRcrYihkLx648Olvy7KbVDE9JYqabnX277bCakfUQB5HNFVO7y6";
# restApiPassword = "ZKuESwSGEud5v11QOqOu8fxqEvGRgcak4IHATwEiJMqoiIcFN436krOioLJ22OqO";
# hyperkittyApiKey = "";
# webSecretKey = "";
# restApiPassword = "";
# baseURL = "briafzentrum.muc.ccc.de";
# allowedArchivingHosts = [ "83.133.178.166" ];
#};
......
......@@ -23,12 +23,15 @@
deployment.targetHost = "${name}.muc.ccc.de";
networking.hostName = lib.mkDefault name;
time.timeZone = "UTC";
boot.kernelPackages = pkgs.linuxPackages_latest;
environment.systemPackages = with pkgs; [
wget curl htop iftop tmux
];
programs.bash.enableCompletion = true;
programs.vim.defaultEditor = true;
services.openssh.enable = true;
services.fail2ban.enable = true;
zramSwap.enable = true;
nixpkgs.system = "x86_64-linux";
};
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment