jackos1998
a2f3410e42
Add per-site and per-box inventories, consolidate shared network design, and relocate the switch and access-point references under the home site.
46 lines
2.0 KiB
Markdown
46 lines
2.0 KiB
Markdown
# mail
|
|
|
|
A Debian VM running [mailcow](https://mailcow.email/) (`mail.nul.ie`) — the
|
|
mail server for `nul.ie`. Declared in `colony`'s `my.vms.instances` but **not
|
|
a NixOS system**: everything inside the VM is configured out of band.
|
|
|
|
- **Source (host-side only):** the `mail` instance in
|
|
[`nixos/boxes/colony/vms/default.nix`](../../../nixos/boxes/colony/vms/default.nix)
|
|
and the `90-vm-mail` network in
|
|
[`nixos/boxes/colony/default.nix`](../../../nixos/boxes/colony/default.nix)
|
|
- **Host:** VM on `colony`
|
|
- **nixpkgs:** not applicable (Debian guest; host-side definition uses `colony`'s `mine-stable`)
|
|
|
|
## Role
|
|
|
|
- Runs the full mailcow stack (Postfix/Dovecot/SOGo/Rspamd) for `nul.ie`.
|
|
Other colony services send through it as `mail.nul.ie` (e.g. Gitea, and the
|
|
disabled Mastodon config).
|
|
- `root` and `data` LVM disks; the `vm-mail-data` LV is included in `colony`'s `borgthin` backups.
|
|
|
|
## Network assignments
|
|
|
|
This guest is not a NixOS system, so its host-routed addresses are not rows in the generated
|
|
[network assignments](../../networking.md#box-assignments) table.
|
|
|
|
### Link and addressing
|
|
|
|
The VM attaches to a dedicated, unbridged TAP (`vm-mail`). `colony` puts the point-to-point
|
|
`custRouting.mail-vm` address on the host side, link-routes public
|
|
`94.142.241.227/32` down the TAP, and advertises `2a0e:97c0:4d2:2000::/64` with RAs.
|
|
|
|
- DNS: `mail-vm.ams1.int.nul.ie` (and `mail.nul.ie` publicly, incl. the PTR in
|
|
estuary's reverse zone). `estuary` accepts traffic to the customer prefixes
|
|
without per-port filtering; `colony` forwards it on ("trust for now").
|
|
|
|
## Notes
|
|
|
|
- ACME certificates are issued on `middleman` and pushed to the VM over SSH
|
|
(`acme@mail.nul.ie mailcow-ssl-reload`, key `middleman/mailcow-ssh.key`);
|
|
the VM's SSH host key is pinned at `.keys/mail-vm-host.pub`.
|
|
|
|
## Notable config files
|
|
|
|
- [`nixos/boxes/colony/vms/default.nix`](../../../nixos/boxes/colony/vms/default.nix) — VM definition.
|
|
- [`nixos/boxes/colony/default.nix`](../../../nixos/boxes/colony/default.nix) — host-side network and routing.
|