From 4f04085d5239e2c688a370706f9007edd0a0d5bb Mon Sep 17 00:00:00 2001 From: lassulus Date: Tue, 12 Apr 2016 15:16:17 +0200 Subject: l 2: add exim-retiolum.nix --- lass/2configs/exim-retiolum.nix | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 lass/2configs/exim-retiolum.nix (limited to 'lass/2configs/exim-retiolum.nix') diff --git a/lass/2configs/exim-retiolum.nix b/lass/2configs/exim-retiolum.nix new file mode 100644 index 000000000..ea2f553b8 --- /dev/null +++ b/lass/2configs/exim-retiolum.nix @@ -0,0 +1,14 @@ +{ config, lib, pkgs, ... }: + +with config.krebs.lib; + +{ + krebs.exim-retiolum.enable = true; + krebs.setuid.sendmail = { + filename = "${pkgs.exim}/bin/exim"; + mode = "4111"; + }; + krebs.iptables.tables.filter.INPUT.rules = [ + { predicate = "-i retiolum -p tcp --dport smtp"; target = "ACCEPT"; } + ]; +} -- cgit v1.2.3 From d811a50f7cc7c491a4ed2748161d308c848e3875 Mon Sep 17 00:00:00 2001 From: lassulus Date: Wed, 27 Apr 2016 13:07:32 +0200 Subject: l 2 exim-*: remove redundant setuid code --- lass/2configs/exim-retiolum.nix | 4 ---- 1 file changed, 4 deletions(-) (limited to 'lass/2configs/exim-retiolum.nix') diff --git a/lass/2configs/exim-retiolum.nix b/lass/2configs/exim-retiolum.nix index ea2f553b8..c07b6c15a 100644 --- a/lass/2configs/exim-retiolum.nix +++ b/lass/2configs/exim-retiolum.nix @@ -4,10 +4,6 @@ with config.krebs.lib; { krebs.exim-retiolum.enable = true; - krebs.setuid.sendmail = { - filename = "${pkgs.exim}/bin/exim"; - mode = "4111"; - }; krebs.iptables.tables.filter.INPUT.rules = [ { predicate = "-i retiolum -p tcp --dport smtp"; target = "ACCEPT"; } ]; -- cgit v1.2.3