dotfiles/terranix/main/containers/email/default.nix
magic_rb 10da34a3ca
Update terranix config for uk3s-nix and terranix changes
Signed-off-by: magic_rb <magic_rb@redalder.org>
2024-07-16 20:41:59 +02:00

53 lines
1.2 KiB
Nix

{
uterranix-lib,
vars,
...
}: let
inherit
(uterranix-lib)
nfsVolume
nomadJob
;
in {
resource."vault_policy"."dovecot-policy" = nfsVolume {
name = "dovecot-policy";
policy = ''
path "kv/data/cluster/dovecot" {
capabilities = ["read"]
}
'';
};
resource."vault_policy"."getmail-policy" = nfsVolume {
name = "getmail-policy";
policy = ''
path "kv/data/cluster/getmail" {
capabilities = ["read"]
}
'';
};
resource."nomad_volume"."dovecot_maildir" = {
volume_name = "org.democratic-csi.nfs";
access_mode = "multi-node-multi-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/dovecot/maildir";
mount_flags = ["nfsvers=3" "hard" "async"];
};
resource."nomad_volume"."mail-configuration" = {
volume_name = "mail-configuration";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/mail-configuration";
mount_flags = ["nfsvers=3" "hard" "async"];
};
resource."nomad_job"."email" = {
jobspec = ./job.hcl;
vars = {
flake_ref = "${vars.flake_host}?rev=${vars.flake_rev}&ref=${vars.flake_ref}";
flake_sha = vars.flake_sha;
};
};
}