dotfiles/nixng/containers/email/dovecot.nix

{inputs, ...}: {
  flake.nixngConfigurations.dovecot = inputs.nixng.nglib.makeSystem {
    system = "x86_64-linux";
    name = "ra-systems-dovecot";
    inherit (inputs) nixpkgs;
    config = {pkgs, ...}: {
      config = {
        dumb-init = {
          enable = true;
          type.services = {};
        };

        services.dovecot = {
          enable = true;
          package = pkgs.dovecot;
          config = {
            protocols = "imap lmtp";

            # auth
            ssl = "no";
            disable_plaintext_auth = "no";
            auth_mechanisms = "plain login";

            mail_location = "maildir:/maildir/%u";

            protocol."imap" = {};
            protocol."lmtp" = {
              mail_plugins = ["sieve"];
            };

            plugin."" = {
              sieve = "/mail-configuration/entry.sieve";
            };

            mail_plugin_dir = pkgs.symlinkJoin {
              name = "dovecot-modules";
              paths = map (pkg: "${pkg}/lib/dovecot") [pkgs.dovecot pkgs.dovecot_pigeonhole];
            };

            # Optimizations:
            # dotlock_use_excl = true;
            maildir_copy_with_hardlinks = true;

            lda_mailbox_autocreate = "yes";
            lmtp_save_to_detail_mailbox = "yes";
            service."lmtp" = {
              inet_listener."lmtp" = {
                address = ["127.0.0.1"];
                port = 24;
              };
            };

            service."imap-login" = {
              inet_listener."imap" = {
                port = 143;
              };

              # inet_listener."imaps" = {
              #   port = 993;
              #   ssl = "yes";
              # };
            };

            # Authentication configuration:
            auth_debug = true;
            log_path = "/proc/self/fd/1";
            info_log_path = "/proc/self/fd/1";
            debug_log_path = "/proc/self/fd/1";

            passdb."" = {
              driver = "passwd-file";
              args = "scheme=plain username_format=%u /secrets/passwd.dovecot";
            };
            userdb."" = {
              driver = "passwd-file";
              args = "username_format=%u /secrets/passwd.dovecot";
              default_fields = "uid=vmail gid=vmail home=/maildir/%u";
            };
          };
        };
      };
    };
  };
}