diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2021-01-24 15:16:31 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2021-01-24 15:17:25 +0100 |
commit | c66c893ef54d8aa48d02d95b945f923d51c16b13 (patch) | |
tree | 575582aa6f6e94e729a9824b1369f3d4bbe88274 /hosts/sif/mail/default.nix | |
parent | b568758a85a08be2c0e635b995a1ffe1a05db4d4 (diff) | |
download | nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar.gz nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar.bz2 nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar.xz nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.zip |
bump
Diffstat (limited to 'hosts/sif/mail/default.nix')
-rw-r--r-- | hosts/sif/mail/default.nix | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/hosts/sif/mail/default.nix b/hosts/sif/mail/default.nix index 2addba9d..29bfb4f1 100644 --- a/hosts/sif/mail/default.nix +++ b/hosts/sif/mail/default.nix | |||
@@ -38,23 +38,23 @@ | |||
38 | /@ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtpin1.ifi.lmu.de:587 | 38 | /@ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtpin1.ifi.lmu.de:587 |
39 | /@(campus\.)?lmu\.de$/ smtp:postout.lrz.de | 39 | /@(campus\.)?lmu\.de$/ smtp:postout.lrz.de |
40 | ''}''; | 40 | ''}''; |
41 | sender_bcc_maps = ''texthash:${pkgs.writeText "sender_bcc" '' | 41 | sender_bcc_maps = ''regexp:${pkgs.writeText "sender_bcc" '' |
42 | uni2work@ifi.lmu.de uni2work@ifi.lmu.de | 42 | /^uni2work(-[^@]*)?@ifi\.lmu\.de$/ uni2work@ifi.lmu.de |
43 | @ifi.lmu.de gregor.kleen@ifi.lmu.de | 43 | /@ifi\.lmu\.de$/ gregor.kleen@ifi.lmu.de |
44 | ''}''; | 44 | ''}''; |
45 | 45 | ||
46 | smtp_sasl_auth_enable = true; | 46 | smtp_sasl_auth_enable = true; |
47 | smtp_sender_dependent_authentication = true; | 47 | smtp_sender_dependent_authentication = true; |
48 | smtp_sasl_tls_security_options = "noanonymous"; | 48 | smtp_sasl_tls_security_options = "noanonymous"; |
49 | smtp_sasl_mechanism_filter = ["plain"]; | 49 | smtp_sasl_mechanism_filter = ["plain"]; |
50 | smtp_sasl_password_maps = "texthash:/var/db/postfix/sasl_passwd"; | 50 | smtp_sasl_password_maps = "regexp:/var/db/postfix/sasl_passwd"; |
51 | smtp_cname_overrides_servername = false; | 51 | smtp_cname_overrides_servername = false; |
52 | smtp_always_send_ehlo = true; | 52 | smtp_always_send_ehlo = true; |
53 | smtp_tls_security_level = "dane"; | ||
53 | 54 | ||
54 | smtp_tls_loglevel = "1"; | 55 | smtp_tls_loglevel = "1"; |
55 | smtp_dns_support_level = "dnssec"; | 56 | smtp_dns_support_level = "dnssec"; |
56 | }; | 57 | }; |
57 | useDane = true; | ||
58 | }; | 58 | }; |
59 | 59 | ||
60 | sops.secrets.postfix-sasl-passwd = { | 60 | sops.secrets.postfix-sasl-passwd = { |