mirror of
https://gitlab.com/simple-nixos-mailserver/nixos-mailserver.git
synced 2025-06-07 19:07:50 +05:00
Merge branch 'ldap-mail-directory-assertion' into 'master'
Fix assertion for ldap mail directory See merge request simple-nixos-mailserver/nixos-mailserver!406
This commit is contained in:
commit
c8bc3e4f1f
@ -1,20 +1,7 @@
|
|||||||
{ config, lib, ... }:
|
{ config, lib, ... }:
|
||||||
{
|
{
|
||||||
assertions = [
|
assertions = [
|
||||||
{
|
|
||||||
assertion = config.mailserver.stateVersion < 2
|
|
||||||
&& config.mailserver.ldap.enable
|
|
||||||
&& config.mailserver.mailDirectory != "/var/vmail";
|
|
||||||
message = ''
|
|
||||||
Issue: The dovecot homedir for LDAP users was previously not respecting `mailserver.mailDirectory`.
|
|
||||||
Remediation:
|
|
||||||
- Stop the `dovecot2.service`
|
|
||||||
- Move `/var/vmail/ldap` below your `mailserver.mailDirectory`
|
|
||||||
- Increase the `stateVersion` to 2.
|
|
||||||
|
|
||||||
Check https://nixos-mailserver.readthedocs.io/en/latest/migrations.html#ldap-home-directory-migration for more information.
|
|
||||||
'';
|
|
||||||
}
|
|
||||||
] ++ lib.optionals config.mailserver.enable [
|
] ++ lib.optionals config.mailserver.enable [
|
||||||
{
|
{
|
||||||
assertion = config.mailserver.stateVersion != null;
|
assertion = config.mailserver.stateVersion != null;
|
||||||
@ -29,6 +16,19 @@
|
|||||||
assertion = config.mailserver.extraVirtualAliases == {};
|
assertion = config.mailserver.extraVirtualAliases == {};
|
||||||
message = "When the LDAP support is enable (mailserver.ldap.enable = true), it is not possible to define mailserver.extraVirtualAliases";
|
message = "When the LDAP support is enable (mailserver.ldap.enable = true), it is not possible to define mailserver.extraVirtualAliases";
|
||||||
}
|
}
|
||||||
|
] ++ lib.optionals (config.mailserver.ldap.enable && config.mailserver.mailDirectory != "/var/vmail") [
|
||||||
|
{
|
||||||
|
assertion = config.mailserver.stateVersion >= 2;
|
||||||
|
message = ''
|
||||||
|
Issue: The dovecot homedir for LDAP users was previously not respecting `mailserver.mailDirectory`.
|
||||||
|
Remediation:
|
||||||
|
- Stop the `dovecot2.service`
|
||||||
|
- Move `/var/vmail/ldap` below your `mailserver.mailDirectory`
|
||||||
|
- Increase the `stateVersion` to 2.
|
||||||
|
|
||||||
|
Check https://nixos-mailserver.readthedocs.io/en/latest/migrations.html#ldap-home-directory-migration for more information.
|
||||||
|
'';
|
||||||
|
}
|
||||||
] ++ lib.optionals (config.mailserver.enable && config.mailserver.certificateScheme != "acme") [
|
] ++ lib.optionals (config.mailserver.enable && config.mailserver.certificateScheme != "acme") [
|
||||||
{
|
{
|
||||||
assertion = config.mailserver.acmeCertificateName == config.mailserver.fqdn;
|
assertion = config.mailserver.acmeCertificateName == config.mailserver.fqdn;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user