colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

gitea: achieve manual account approval via email intercepting

Browse Source 
flow: user signs up, with email. their activation email is redirected to me.
if they look good, i forward that email.
This commit is contained in:
Colin
2022-05-10 23:15:01 +00:00
parent 44ce66b7ec
commit a1bbd16b94
2 changed files with 19 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
cfg/services/gitea.nix
View File

@@ -19,8 +19,9 @@
service = { service = {
# timeout for email approval. 5760 = 4 days # timeout for email approval. 5760 = 4 days
ACTIVE_CODE_LIVE_MINUTES = 5760; ACTIVE_CODE_LIVE_MINUTES = 5760;
REGISTER_EMAIL_CONFIRM = false; # REGISTER_EMAIL_CONFIRM = false;
REGISTER_MANUAL_CONFIRM = true; # REGISTER_MANUAL_CONFIRM = true;
REGISTER_EMAIL_CONFIRM = true;
# not sure what this notified on? # not sure what this notified on?
ENABLE_NOTIFY_MAIL = true; ENABLE_NOTIFY_MAIL = true;
# defaults to image-based captcha. # defaults to image-based captcha.

16
cfg/services/postfix.nix
View File

@@ -106,4 +106,20 @@ in
auth_debug = yes auth_debug = yes
# verbose_ssl = yes # verbose_ssl = yes
''; '';
#### OUTGOING MESSAGE REWRITING:
services.postfix.enableHeaderChecks = true;
services.postfix.headerChecks = [
# intercept gitea registration confirmations and manually screen them
{
# headerChecks are somehow ignorant of alias rules: have to redirect to a real user
action = "REDIRECT colin@uninsane.org";
pattern = "/^Subject: Please activate your account/";
}
# XXX postfix only supports performing ONE action per header.
# {
# action = "REPLACE Subject: git application: Please activate your account";
# pattern = "/^Subject:.*activate your account/";
# }
];
} }