feat(service): replace ntfy with maddy

feat(service): remove ntfy

machines/bomba/networking.nix

@@ -10,8 +10,13 @@ in
       enable = true;
       allowedTCPPorts = [
         22
+        25
         80
+        143
         443
+        465
+        587
+        993
       ];
       allowedUDPPorts = [
         80

machines/bomba/secrets.nix

@@ -7,11 +7,11 @@
         sopsFile = ../../secrets/bomba.sops.yaml;
       };
       ntfy_users = {
-        owner = "ntfy-sh";
+        # owner = "ntfy-sh";
         sopsFile = ../../secrets/bomba.sops.yaml;
       };
       ntfy_access = {
-        owner = "ntfy-sh";
+        # owner = "ntfy-sh";
         sopsFile = ../../secrets/bomba.sops.yaml;
       };
     };

machines/bomba/services/default.nix

@@ -5,6 +5,7 @@
     ./gitea.nix
     ./nextcloud.nix
     ./ntfy.nix
+    ./maddy.nix
     ./octoprint.nix
     ./vaultwarden.nix
   ];

machines/bomba/services/maddy.nix

@@ -0,0 +1,41 @@
+{
+  pkgs,
+  config,
+  options,
+  currentSystemEmail,
+  ...
+}:
+{
+  services.maddy = {
+    enable = true;
+    primaryDomain = "patrickcanal.it";
+    ensureAccounts = [
+      "postmaster@patrickcanal.it"
+      "test@patrickcanal.it"
+    ];
+    ensureCredentials = {
+      "postmaster@patrickcanal.it".passwordFile = "${pkgs.writeText "postmaster" "test"}";
+      "test@patrickcanal.it".passwordFile = "${pkgs.writeText "test" "test"}";
+    };
+    tls = {
+      loader = "file";
+      certificates = [
+        {
+          keyPath = "/etc/ssl/certs/privkey.pem";
+          certPath = "/etc/ssl/certs/fullchain.pem";
+        }
+      ];
+    };
+    config =
+      builtins.replaceStrings
+        [
+          "imap tcp://0.0.0.0:143"
+          "submission tcp://0.0.0.0:587"
+        ]
+        [
+          "imap tls://0.0.0.0:993 tcp://0.0.0.0:143"
+          "submission tls://0.0.0.0:465 tcp://0.0.0.0:587"
+        ]
+        options.services.maddy.config.default;
+  };
+}

machines/bomba/services/ntfy.nix

@@ -1,16 +1,16 @@
 { config, ... }:
 {
-  services.ntfy-sh = {
-    enable = true;
-    environmentFile = config.sops.templates."ntfy.env".path;
-    settings = {
-      listen-http = ":8005";
-      base-url = "https://ntfy.patrickcanal.it";
-      smtp-server-listen = ":25";
-      smtp-server-domain = "patrickcanal.it";
-      behind-proxy = true;
-      enable-login = true;
-      require-login = true;
-    };
-  };
+  # services.ntfy-sh = {
+  #   enable = false;
+  #   environmentFile = config.sops.templates."ntfy.env".path;
+  #   settings = {
+  #     listen-http = ":8005";
+  #     base-url = "https://ntfy.patrickcanal.it";
+  #     smtp-server-listen = ":25";
+  #     smtp-server-domain = "patrickcanal.it";
+  #     behind-proxy = true;
+  #     enable-login = true;
+  #     require-login = true;
+  #   };
+  # };
 }