Add terranix config for email

Signed-off-by: Magic_RB <magic_rb@redalder.org>
This commit is contained in:
Magic_RB 2023-06-15 23:10:07 +02:00
parent 86d13b4f40
commit 6189356d7c

View file

@ -0,0 +1,54 @@
{ elib, ... }:
let
inherit (elib)
nfsVolume
nomadJob;
flake_host = "";
flake_rev = "";
flake_ref = "";
flake_sha = "";
in
{
resource."vault_policy"."dovecot-policy" = nfsVolume {
name = "dovecot-policy";
policy = ''
path "kv/data/cluster/dovecot" {
capabilities = ["read"]
}
'';
};
resource."vault_policy"."getmail-policy" = nfsVolume {
name = "getmail-policy";
policy = ''
path "kv/data/cluster/getmail" {
capabilities = ["read"]
}
'';
};
resource."nomad_volume"."dovecot_maildir" = {
volume_name = "org.democratic-csi.nfs";
access_mode = "multi-node-multi-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/dovecot/maildir";
mount_flags = [ "nfsvers=3" "hard" "async" ];
};
resource."nomad_volume"."mail-configuration" = {
volume_name = "mail-configuration";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/mail-configuration";
mount_flags = [ "nfsvers=3" "hard" "async" ];
};
resource."nomad_job"."email" = {
jobspec = ./job.hcl;
vars = {
flake_ref = "${flake_host}?rev=${flake_rev}&ref=${flake_ref}";
flake_sha = flake_sha;
};
};
}