bouncy.email: MTA-STS

1 files changed, 4 insertions, 0 deletions

diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index d72a4465..9bdaac75 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -87,6 +87,8 @@ in {
           .bouncy.email /run/credentials/postfix.service/bouncy.email.full.pem
         ''}'';
 
+        smtp_tls_policy_maps = "socketmap:unix:${config.services.postfix-mta-sts-resolver.settings.path}:postfix";
+
         local_recipient_maps = "";
 
         # 10 GiB
@@ -723,5 +725,7 @@ in {
       format = "binary";
       sopsFile = ./spm-keys.json;
     };
+
+    services.postfix-mta-sts-resolver.enable = true;
   };
 }