zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

Use hashed passwordfile just to be safe

Browse Source
This commit is contained in:
Zuckerberg 2023-04-09 23:00:10 -06:00
parent 1065cc4b59
commit 3412d5caf9
4 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
common/server/mailserver.nix
View File

@ -43,7 +43,7 @@ in
"robot@neet.dev"
];
sendOnly = true;
hashedPassword = "$2b$05$hkmwXGJSKuG/1.SmLecWSuzlq1F5pjp2ScoipQoVLR0ssSN5MgRs.";
hashedPasswordFile = "/run/agenix/hashed-robots-email-pw";
};
};
rejectRecipients = [
@ -55,6 +55,7 @@ in
certificateScheme = 3; # use let's encrypt for certs
};
age.secrets.email-pw.file = ../../secrets/email-pw.age;
age.secrets.hashed-robots-email-pw.file = ../../secrets/hashed-robots-email-pw.age;
# sendmail to use xxx@domain instead of xxx@mail.domain
services.postfix.origin = "$mydomain";

BIN
secrets/hashed-robots-email-pw.age Normal file
View File

Binary file not shown.

BIN
secrets/robots-email-pw.age
View File

Binary file not shown.

1
secrets/secrets.nix
View File

@ -15,6 +15,7 @@ in
# email
"email-pw.age".publicKeys = all;
"sasl_relay_passwd.age".publicKeys = all;
"hashed-robots-email-pw.age".publicKeys = all;
"robots-email-pw.age".publicKeys = all;
# vpn