push

modules/services/mailserver.nix

@@ -1,4 +1,5 @@
-{ inputs, ... }: {
+{ inputs, ... }:
+{
   den.aspects.mailserver = {
     nixos = {
       imports = [ inputs.nixos-mailserver.nixosModules.default ];
@@ -7,7 +8,7 @@
         acceptTerms = true;
         defaults.email = "security@bug.tools";
 
-        certs."mail.bug.tools" = {
+        certs."mx.bug.tools" = {
           listenHTTP = "1360";
         };
       };
@@ -17,10 +18,10 @@
 
         stateVersion = 4;
 
-        fqdn = "mail.bug.tools";
+        fqdn = "mx.bug.tools";
         domains = [ "bug.tools" ];
 
-        x509.useACMEHost = "mail.bug.tools";
+        x509.useACMEHost = "mx.bug.tools";
 
         fullTextSearch = {
           enable = true;
@@ -33,6 +34,7 @@
             hashedPasswordFile = "/home/bug/mailserver/bug.passwd";
             aliases = [
               "admin@bug.tools"
+              "security@bug.tools"
               "google@bug.tools"
               "apple@bug.tools"
               "roblox@bug.tools"
@@ -44,6 +46,11 @@
               "contact@bug.tools"
               "claude@bug.tools"
               "rumble@bug.tools"
+              "bambu@bug.tools"
+              "soulframe@bug.tools"
+              "vortex@bug.tools"
+              "codex@bug.tools"
+              "tailscale@bug.tools"
             ];
           };
 
@@ -56,6 +63,43 @@
           };
         };
       };
+
+      den.tunnels = [
+        "mail"
+        "email"
+      ];
+
+      services.roundcube = {
+        enable = true;
+        hostName = "mail.bug.tools";
+        extraConfig = ''
+          $config['imap_host'] = 'ssl://localhost:993';
+          $config['imap_conn_options'] = [
+            'ssl' => ['verify_peer' => false, 'verify_peer_name' => false]
+          ];
+          $config['smtp_host'] = 'ssl://localhost:465';
+          $config['smtp_conn_options'] = [
+            'ssl' => ['verify_peer' => false, 'verify_peer_name' => false]
+          ];
+          $config['smtp_user'] = "%u";
+          $config['smtp_pass'] = "%p";
+          $config['username_domain'] = 'bug.tools';
+        '';
+      };
+
+      services.nginx.enable = true;
+
+      services.nginx.virtualHosts."mail.bug.tools" = {
+        forceSSL = false;
+        enableACME = false;
+
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 8088;
+          }
+        ];
+      };
     };
   };
 }