Berwn
1cb6f39ea2
mx1 runs Simple NixOS Mailserver (Postfix/Dovecot/Rspamd/OpenDKIM) for cnx.email. The TLS cert is obtained via ACME DNS-01 using a dedicated, scoped TSIG key (acme_mx1) that ns1 authorizes for only _acme-challenge.mx1 and _acme-challenge.mta-sts on the cnx.email zone, so the credential can write nothing else. Mailbox passwords are auto-minted by a clan vars generator (four-word passphrase + number). DANE TLSA (3 1 1) is published for _25._tcp.mx1; --reuse-key keeps the key digest stable across renewals. MTA-STS is enforced via a Caddy vhost serving the policy on :443 from the same cert (mta-sts SAN). Firewall opens 25/587/465/143/993/443; 80 stays closed.
359 lines
9.5 KiB
JSON
359 lines
9.5 KiB
JSON
{
|
|
"nodes": {
|
|
"blobs": {
|
|
"flake": false,
|
|
"locked": {
|
|
"lastModified": 1604995301,
|
|
"narHash": "sha256-wcLzgLec6SGJA8fx1OEN1yV/Py5b+U5iyYpksUY/yLw=",
|
|
"owner": "simple-nixos-mailserver",
|
|
"repo": "blobs",
|
|
"rev": "2cccdf1ca48316f2cfd1c9a0017e8de5a7156265",
|
|
"type": "gitlab"
|
|
},
|
|
"original": {
|
|
"owner": "simple-nixos-mailserver",
|
|
"repo": "blobs",
|
|
"type": "gitlab"
|
|
}
|
|
},
|
|
"clan-core": {
|
|
"inputs": {
|
|
"data-mesher": "data-mesher",
|
|
"disko": "disko",
|
|
"flake-parts": "flake-parts",
|
|
"nix-darwin": "nix-darwin",
|
|
"nix-select": "nix-select",
|
|
"nixos-facter-modules": "nixos-facter-modules",
|
|
"nixpkgs": "nixpkgs",
|
|
"sops-nix": "sops-nix",
|
|
"systems": "systems",
|
|
"treefmt-nix": "treefmt-nix"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1779116933,
|
|
"narHash": "sha256-BoSQT4vbuWbGcDbXp4nqBd1I9X8r+dLSPtTbc5yJd28=",
|
|
"rev": "10d86d5d8291fe5162a5535f433a4d50efc4b2bc",
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/api/v1/repos/clan/clan-core/archive/10d86d5d8291fe5162a5535f433a4d50efc4b2bc.tar.gz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/clan/clan-core/archive/25.11.tar.gz"
|
|
}
|
|
},
|
|
"data-mesher": {
|
|
"inputs": {
|
|
"flake-parts": [
|
|
"clan-core",
|
|
"flake-parts"
|
|
],
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
],
|
|
"treefmt-nix": [
|
|
"clan-core",
|
|
"treefmt-nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1767582502,
|
|
"narHash": "sha256-WVcYGWcAlWzVt38OaTC5i5Q3QkIKJKZsJ7LcQZVVxeE=",
|
|
"rev": "31f2e3ecf207fd2760e3cebf7c2cf3cb7170ea3d",
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/31f2e3ecf207fd2760e3cebf7c2cf3cb7170ea3d.tar.gz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/clan/data-mesher/archive/main.tar.gz"
|
|
}
|
|
},
|
|
"disko": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1766150702,
|
|
"narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
|
|
"owner": "nix-community",
|
|
"repo": "disko",
|
|
"rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "disko",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-compat": {
|
|
"flake": false,
|
|
"locked": {
|
|
"lastModified": 1767039857,
|
|
"narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
|
|
"owner": "edolstra",
|
|
"repo": "flake-compat",
|
|
"rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "edolstra",
|
|
"repo": "flake-compat",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-parts": {
|
|
"inputs": {
|
|
"nixpkgs-lib": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777988971,
|
|
"narHash": "sha256-qIoWPDs+0/8JecyYgE3gpKQxW/4bLW/gp45vow9ioCQ=",
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"rev": "0678d8986be1661af6bb555f3489f2fdfc31f6ff",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"git-hooks": {
|
|
"inputs": {
|
|
"flake-compat": [
|
|
"nixos-mailserver",
|
|
"flake-compat"
|
|
],
|
|
"gitignore": "gitignore",
|
|
"nixpkgs": [
|
|
"nixos-mailserver",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1772893680,
|
|
"narHash": "sha256-JDqZMgxUTCq85ObSaFw0HhE+lvdOre1lx9iI6vYyOEs=",
|
|
"owner": "cachix",
|
|
"repo": "git-hooks.nix",
|
|
"rev": "8baab586afc9c9b57645a734c820e4ac0a604af9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "cachix",
|
|
"repo": "git-hooks.nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"gitignore": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixos-mailserver",
|
|
"git-hooks",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1709087332,
|
|
"narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
|
|
"owner": "hercules-ci",
|
|
"repo": "gitignore.nix",
|
|
"rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "gitignore.nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-darwin": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1772129556,
|
|
"narHash": "sha256-Utk0zd8STPsUJPyjabhzPc5BpPodLTXrwkpXBHYnpeg=",
|
|
"owner": "nix-darwin",
|
|
"repo": "nix-darwin",
|
|
"rev": "ebec37af18215214173c98cf6356d0aca24a2585",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-darwin",
|
|
"ref": "nix-darwin-25.11",
|
|
"repo": "nix-darwin",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-select": {
|
|
"locked": {
|
|
"lastModified": 1763303120,
|
|
"narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
|
|
"rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
|
|
}
|
|
},
|
|
"nixos-facter-modules": {
|
|
"locked": {
|
|
"lastModified": 1773858690,
|
|
"narHash": "sha256-oW0/lC0oRG5H5LaK6Rmh9L1wmkn9TbenM4bXwnIEDKA=",
|
|
"owner": "nix-community",
|
|
"repo": "nixos-facter-modules",
|
|
"rev": "139dcef4dfc97009629c445806f197883351ab4a",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "nixos-facter-modules",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixos-mailserver": {
|
|
"inputs": {
|
|
"blobs": "blobs",
|
|
"flake-compat": "flake-compat",
|
|
"git-hooks": "git-hooks",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1773912645,
|
|
"narHash": "sha256-QHzRqq6gh+t3F/QU9DkP7X63dDDcuIQmaDz12p7ANTg=",
|
|
"owner": "simple-nixos-mailserver",
|
|
"repo": "nixos-mailserver",
|
|
"rev": "25e6dbb8fca3b6e779c5a46fd03bd760b2165bb5",
|
|
"type": "gitlab"
|
|
},
|
|
"original": {
|
|
"owner": "simple-nixos-mailserver",
|
|
"ref": "nixos-25.11",
|
|
"repo": "nixos-mailserver",
|
|
"type": "gitlab"
|
|
}
|
|
},
|
|
"nixpkgs": {
|
|
"locked": {
|
|
"lastModified": 1778003029,
|
|
"narHash": "sha256-q/nkKLDtHIyLjZpKhWk3cSK5IYsFqtMd6UtXF3ddjgA=",
|
|
"owner": "nixos",
|
|
"repo": "nixpkgs",
|
|
"rev": "0c88e1f2bdb93d5999019e99cb0e61e1fe2af4c5",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nixos",
|
|
"ref": "nixos-25.11",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"root": {
|
|
"inputs": {
|
|
"clan-core": "clan-core",
|
|
"nixos-mailserver": "nixos-mailserver",
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
],
|
|
"treefmt-nix": "treefmt-nix_2"
|
|
}
|
|
},
|
|
"sops-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777944972,
|
|
"narHash": "sha256-VfGRo1qTBKOe3s2gOv8LSoA6Fk19PvBlwQ1ECN0Evn8=",
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"rev": "c591bf665727040c6cc5cb409079acb22dcce33c",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"treefmt-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1768158989,
|
|
"narHash": "sha256-67vyT1+xClLldnumAzCTBvU0jLZ1YBcf4vANRWP3+Ak=",
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"rev": "e96d59dff5c0d7fddb9d113ba108f03c3ef99eca",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"treefmt-nix_2": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1780220602,
|
|
"narHash": "sha256-eynAfOmbmxJnkp7YewvCEbShNnnYJ9gLLqkzsYtBPeM=",
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"rev": "db947814a175b7ca6ded66e21383d938df01c227",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"type": "github"
|
|
}
|
|
}
|
|
},
|
|
"root": "root",
|
|
"version": 7
|
|
}
|