firewall respects settings

This commit is contained in:
Robin Raymond 2017-08-13 14:20:02 +02:00
parent 72f45af1ca
commit ecd73f4e1c

View File

@ -14,13 +14,15 @@
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>
{ domain, host_prefix }:
{ domain, host_prefix, enable_imap, enable_pop3 }:
{
hostName = "${host_prefix}.${domain}";
firewall = {
enable = true;
allowedTCPPorts = [ 25 143 587 ]; # < TODO: make this flexible
allowedTCPPorts = [ 25 587 ]
++ (if enable_imap then [ 143 ] else [])
++ (if enable_pop3 then [ 110 ] else []);
};
}