From 407d1d2ad064e5bf6eecc3aa927f928b35ff5265 Mon Sep 17 00:00:00 2001
From: Alexander Kobjolke <me@failco.de>
Date: Sat, 15 Apr 2023 07:54:34 +0200
Subject: [PATCH] thrall: Enable roundcube webmail

---
 hosts/thrall/default.nix | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/hosts/thrall/default.nix b/hosts/thrall/default.nix
index 5a3efe7..db3a5b2 100644
--- a/hosts/thrall/default.nix
+++ b/hosts/thrall/default.nix
@@ -193,7 +193,7 @@ in {
       forceSSL = true;
       enableACME = true;
       root = "/srv/www/failco.de";
-      serverAliases = [ "www.failco.de" "mail.failco.de" ];
+      serverAliases = [ "www.failco.de" ];
       extraConfig = ''
         add_header X-Frame-Options 'SAMEORIGIN';
       '';
@@ -329,6 +329,20 @@ in {
     virusScanning = true;
   };
 
+  services.roundcube = {
+    enable = true;
+    hostName = "mail.failco.de";
+    dicts = with pkgs.aspellDicts; [ en de ];
+    plugins = [ "archive" "attachment_reminder" "managesieve" "markasjunk" ];
+    extraConfig = ''
+      # starttls needed for authentication, so the fqdn required to match
+      # the certificate
+      $config['smtp_server'] = "tls://${config.mailserver.fqdn}";
+      $config['smtp_user'] = "%u";
+      $config['smtp_pass'] = "%p";
+    '';
+  };
+
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave