add zammad to fw vm, add web-arm machine

hosts/mail.cloonar.com/modules/dovecot.nix

@@ -55,6 +55,10 @@ let
     doveadm user *@szaku-consulting.at | while read user; do
     doveadm -v sync -u $user $SERVER
     done
+
+    doveadm user *@korean-skin.care | while read user; do
+    doveadm -v sync -u $user $SERVER
+    done
   '';
 
   quotaWarning = pkgs.writeShellScriptBin "quota-warning.sh" ''

hosts/mail.cloonar.com/modules/openldap.nix

@@ -255,6 +255,33 @@ in {
       #   olcPPolicyHashCleartext = "TRUE";
       # };
 
+      "olcDatabase={8}mdb".attrs = {
+        objectClass = ["olcDatabaseConfig" "olcMdbConfig"];
+
+        olcDatabase = "{8}mdb";
+        olcDbDirectory = "/var/lib/openldap/data";
+
+        olcSuffix = "dc=korean-skin,dc=care";
+
+        olcAccess = [
+          ''
+            {0}to attrs=userPassword
+              by self write
+              by anonymous auth
+              by dn="cn=owncloud,ou=system,ou=users,dc=cloonar,dc=com" write
+              by dn="cn=authelia,ou=system,ou=users,dc=cloonar,dc=com" write
+              by dn.subtree="ou=system,ou=users,dc=cloonar,dc=com" read
+              by group.exact="cn=Administrators,ou=groups,dc=cloonar,dc=com" write
+              by * none
+          ''
+          ''
+            {1}to *
+              by dn.subtree="ou=system,ou=users,dc=cloonar,dc=com" read
+              by group.exact="cn=Administrators,ou=groups,dc=cloonar,dc=com" write
+              by * read
+          ''
+        ];
+      };
 
       # "cn=module{0},cn=config" = {
       #   attrs = {