pub-solar/os
5
0
Fork 2
Code Issues 4 Pull requests Packages Projects 1 Releases Wiki Activity

mailman: trigger postfix reload when caddy renews

Browse source 
TLS Let's Encrypt certificates
This commit is contained in:
teutat3s 2023-02-25 17:54:47 +01:00
parent 94cc00572e
commit a1cb071773
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
1 changed files with 25 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
hosts/flora-6/mailman.nix
View file

@ -29,6 +29,31 @@ in {
hostname = "list.pub.solar"; hostname = "list.pub.solar";
}; };
systemd.paths.watcher-caddy-ssl-file = {
description = "Watches for changes in caddy's TLS cert file (after renewals) to reload postfix";
documentation = ["systemd.path(5)"];
partOf = ["postfix-reload.service"];
pathConfig = {
PathChanged = "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/list.pub.solar/list.pub.solar.crt";
Unit = "postfix-reload.service";
};
wantedBy = ["multi-user.target"];
};
systemd.services."postfix-reload" = {
description = "Reloads postfix config, e.g. after TLS certs change, notified by watcher-caddy-ssl-file.path";
documentation = ["systemd.path(5)"];
requires = ["postfix.service"];
after = ["postfix.service"];
startLimitIntervalSec = 10;
startLimitBurst = 5;
serviceConfig.Type = "oneshot";
script = ''
${pkgs.systemd}/bin/systemctl reload postfix
'';
wantedBy = ["multi-user.target"];
};
services.mailman = { services.mailman = {
enable = true; enable = true;
# We use caddy instead of nginx # We use caddy instead of nginx