From bd4503c035061cecc718011056afaff3d6aba36b Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Tue, 4 Feb 2025 11:51:38 +0100
Subject: [PATCH] fix ldap logging and add sleep to certificate renewal postRun

---
 hosts/mail/modules/dovecot.nix  | 2 +-
 hosts/mail/modules/openldap.nix | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/mail/modules/dovecot.nix b/hosts/mail/modules/dovecot.nix
index 66bf5cc..1bbc9c3 100644
--- a/hosts/mail/modules/dovecot.nix
+++ b/hosts/mail/modules/dovecot.nix
@@ -255,7 +255,7 @@ in
       "imap-test.${domain}"
       "imap-02.${domain}"
     ];
-    postRun = "systemctl restart dovecot2.service";
+    postRun = "sleep 2 && systemctl restart dovecot2.service";
   };
 
   networking.firewall.allowedTCPPorts = [
diff --git a/hosts/mail/modules/openldap.nix b/hosts/mail/modules/openldap.nix
index 540c267..70fbd89 100644
--- a/hosts/mail/modules/openldap.nix
+++ b/hosts/mail/modules/openldap.nix
@@ -12,7 +12,7 @@ in {
     urlList = [ "ldap:///" "ldaps:///" ];
 
     settings.attrs = {
-      olcLogLevel = "-1";
+      olcLogLevel = "256";
 
       olcTLSCACertificateFile = "/var/lib/acme/ldap.${domain}/full.pem";
       olcTLSCertificateFile = "/var/lib/acme/ldap.${domain}/cert.pem";