tweak outgoing smtp sasl

1 files changed, 7 insertions, 6 deletions

diff --git a/hel.nix b/hel.nix
index c95bbedd..9afb172e 100644
--- a/hel.nix
+++ b/hel.nix
@@ -201,17 +201,18 @@
         authorized_submit_users = !uucp, static:anyone
         message_size_limit = 0
 
-        smtp_sender_dependent_authentication = no
         sender_dependent_default_transport_maps = regexp:${pkgs.writeText "sender_relay" ''
           /@math(ematik)?\.(lmu|uni-muenchen)\.de$/ sshsendmail:math60.mathinst.loc
-          /@(cip|stud)\.ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtp.ifi.lmu.de
+          /@(cip|stud)\.ifi\.(lmu|uni-muenchen)\.de$/ smtp:[smtp.ifi.lmu.de]
         ''}
-        smtp_sasl_password_maps = texthash:/var/db/postfix/sasl_passwd
-        smtp_sasl_type = cyrus
-        smtp_sasl_auth_enable = yes
 
+        smtp_sasl_auth_enable = yes
+        smtp_sender_dependent_authentication = yes
+        smtp_sasl_tls_security_options = noanonymous
+        smtp_tls_security_level = encrypt
+        smtp_sasl_password_maps = texthash:/var/db/postfix/sasl_passwd
         smtp_cname_overrides_servername = no
-        smtp_sasl_security_options =
+        smtp_always_send_ehlo = yes
       '';
     };