From c2a5073339a0f1fbba13648cb93579937c2519db Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Sat, 13 Jun 2020 02:11:00 +0100 Subject: feat(nixos/smtprelay): Add derivation & module for SMTP relay This adds a little tool that can be used to relay mail to Gmail (and other SMTP servers). It is intended to be used by Gerrit, which is incompatible with Gmail's SMTP servers. Configuration has been tested by performing a few sends through the tvlbot@tazj.in account. Note that this is using the standard Gmail SMTP server. Using the smtp-relay server relies on IP whitelisting, but camden.tazj.in has a larger number of IPv6 addresses than can be whitelisted (the maximum is 65k). This means that we are limited to 2000 mails per recipient per day, which should be fine. Change-Id: Ie43564d753030f5c800a9cdb4ae98292877d80dc Reviewed-on: https://cl.tvl.fyi/c/depot/+/101 Reviewed-by: edef --- ops/nixos/camden/default.nix | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'ops/nixos/camden/default.nix') diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix index ea8f0f5ad25b..46e0a3981c8b 100644 --- a/ops/nixos/camden/default.nix +++ b/ops/nixos/camden/default.nix @@ -18,6 +18,7 @@ in lib.fix(self: { ../modules/depot.nix ../modules/hound.nix ../modules/monorepo-gerrit.nix + ../modules/smtprelay.nix ../modules/tvl-slapd/default.nix "${pkgs.nixpkgsSrc}/nixos/modules/services/web-apps/gerrit.nix" ]; @@ -277,6 +278,17 @@ in lib.fix(self: { }; }; + # Start a local SMTP relay to Gmail (used by gerrit) + services.depot.smtprelay = { + enable = true; + args = { + listen = ":2525"; + remote_host = "smtp.gmail.com:587"; + remote_auth = "plain"; + remote_user = "tvlbot@tazj.in"; + }; + }; + # serve my website(s) services.nginx = { enable = true; -- cgit 1.4.1