Files

T

jackos1998 a2f3410e42 docs/boxes: Document deployed boxes

Add per-site and per-box inventories, consolidate shared network design,
and relocate the switch and access-point references under the home site.

2026-08-02 00:12:57 +01:00

2.0 KiB

Raw Blame History

mail

A Debian VM running mailcow (mail.nul.ie) — the mail server for nul.ie. Declared in colony's my.vms.instances but not a NixOS system: everything inside the VM is configured out of band.

Source (host-side only): the mail instance in nixos/boxes/colony/vms/default.nix and the 90-vm-mail network in nixos/boxes/colony/default.nix
Host: VM on colony
nixpkgs: not applicable (Debian guest; host-side definition uses colony's mine-stable)

Role

Runs the full mailcow stack (Postfix/Dovecot/SOGo/Rspamd) for nul.ie. Other colony services send through it as mail.nul.ie (e.g. Gitea, and the disabled Mastodon config).
root and data LVM disks; the vm-mail-data LV is included in colony's borgthin backups.

Network assignments

This guest is not a NixOS system, so its host-routed addresses are not rows in the generated network assignments table.

Link and addressing

The VM attaches to a dedicated, unbridged TAP (vm-mail). colony puts the point-to-point custRouting.mail-vm address on the host side, link-routes public 94.142.241.227/32 down the TAP, and advertises 2a0e:97c0:4d2:2000::/64 with RAs.

DNS: mail-vm.ams1.int.nul.ie (and mail.nul.ie publicly, incl. the PTR in estuary's reverse zone). estuary accepts traffic to the customer prefixes without per-port filtering; colony forwards it on ("trust for now").

Notes

ACME certificates are issued on middleman and pushed to the VM over SSH (acme@mail.nul.ie mailcow-ssl-reload, key middleman/mailcow-ssh.key); the VM's SSH host key is pinned at .keys/mail-vm-host.pub.

Notable config files

nixos/boxes/colony/vms/default.nix — VM definition.
nixos/boxes/colony/default.nix — host-side network and routing.

2.0 KiB Raw Blame History