about summary refs log tree commit diff
path: root/modules/services/postfix/default.nix
blob: 8a0865b9f6235d12a16735f9bf129ebbab5443bc (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
{ config, lib, ... }:

with lib;

let
  cfg = config.vuizvui.services.postfix;

  mkRestriction = name: specificDescription: {
    option.${name} = mkOption {
      default = null;
      type = types.nullOr (types.listOf types.str);
      description = ''
        A list of restrictions to apply or <option>null</option> to use the
        built-in default value from Postfix.
        ${specificDescription}
      '';
    };

    config = let
      restrictions = cfg.restrictions.${name};
    in mkIf (restrictions != null) {
      services.postfix.extraConfig = ''
        smtpd_${name}_restrictions = ${concatStringsSep ", " restrictions}
      '';
    };
  };

  restrictions = mapAttrsToList mkRestriction {
    client = ''
      SMTP server access restrictions in the context of a client SMTP connection
      request.
    '';
    data = ''
      Access restrictions that the Postfix SMTP server applies in the context of
      the SMTP DATA command.
    '';
    end_of_data = ''
      Access restrictions that the Postfix SMTP server applies in the context of
      the SMTP END-OF-DATA command.
    '';
    etrn = ''
      SMTP server access restrictions in the context of a client ETRN request.
    '';
    helo = ''
      Restrictions that the Postfix SMTP server applies in the context of the
      SMTP HELO command.
    '';
    recipient = ''
      Access restrictions that the Postfix SMTP server applies in the context of
      the RCPT TO command.
    '';
    sender = ''
      Restrictions that the Postfix SMTP server applies in the context of the
      MAIL FROM command.
    '';
  };

in {
  options.vuizvui.services.postfix = {
    enable = mkEnableOption "Vuizvui Postfix";
    restrictions = fold mergeAttrs {} (catAttrs "option" restrictions);
  };

  config = mkIf cfg.enable (mkMerge (catAttrs "config" restrictions));
}