feat(ops/modules): enable NNTP on inbox.tvl.su r/5512

Change-Id: Iec564860a247fe51a5549129be294a3629645519
Reviewed-on: https://cl.tvl.fyi/c/depot/+/7635
Reviewed-by: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI

1 files changed, 14 insertions, 2 deletions

diff --git a/ops/modules/depot-inbox.nix b/ops/modules/depot-inbox.nix
index 3193f8d0cab5..9a7f7cc50496 100644
--- a/ops/modules/depot-inbox.nix
+++ b/ops/modules/depot-inbox.nix
@@ -64,7 +64,6 @@ in
 
       http.enable = true;
       http.port = 8053;
-      # nntp.enable = true;
 
       imap = {
         enable = true;
@@ -73,6 +72,13 @@ in
         key = "/var/lib/public-inbox/tls/key.pem";
       };
 
+      nntp = {
+        enable = true;
+        port = 563;
+        cert = "/var/lib/public-inbox/tls/fullchain.pem";
+        key = "/var/lib/public-inbox/tls/key.pem";
+      };
+
       inboxes.depot = rec {
         address = [
           "depot@tvl.su" # primary address
@@ -86,6 +92,8 @@ in
         watch = [
           "maildir:/var/lib/public-inbox/depot-imap/INBOX/"
         ];
+
+        newsgroup = "su.tvl.depot";
       };
 
       settings.coderepo.depot = {
@@ -94,9 +102,13 @@ in
       };
 
       settings.publicinbox.wwwlisting = "all";
+      settings.publicinbox.nntpserver = [ "inbox.tvl.su" ];
     };
 
-    networking.firewall.allowedTCPPorts = [ /* imap = */ 993 ];
+    networking.firewall.allowedTCPPorts = [
+      993 # imap
+      563 # nntp
+    ];
 
     age.secrets.depot-inbox-imap = {
       file = depot.ops.secrets."depot-inbox-imap.age";