nixos/stalwart-mail: utilize lib.getExe

This commit is contained in:
oddlama 2025-05-20 22:23:32 +02:00
parent 69ae3ba1f6
commit 1069853a49
No known key found for this signature in database
GPG Key ID: 14EFE510775FE39A

View File

@ -162,7 +162,7 @@ in
serviceConfig = {
ExecStart = [
""
"${cfg.package}/bin/stalwart-mail --config=${configFile}"
"${lib.getExe cfg.package} --config=${configFile}"
];
LoadCredential = lib.mapAttrsToList (key: value: "${key}:${value}") cfg.credentials;
@ -175,6 +175,10 @@ in
CacheDirectory = "stalwart-mail";
StateDirectory = "stalwart-mail";
# Upstream uses "stalwart" as the username since 0.12.0
User = "stalwart-mail";
Group = "stalwart-mail";
# Bind standard privileged ports
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];