summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2021-01-24 15:16:31 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2021-01-24 15:17:25 +0100
commitc66c893ef54d8aa48d02d95b945f923d51c16b13 (patch)
tree575582aa6f6e94e729a9824b1369f3d4bbe88274 /hosts
parentb568758a85a08be2c0e635b995a1ffe1a05db4d4 (diff)
downloadnixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar
nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar.gz
nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar.bz2
nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.tar.xz
nixos-c66c893ef54d8aa48d02d95b945f923d51c16b13.zip
bump
Diffstat (limited to 'hosts')
-rw-r--r--hosts/sif/default.nix2
-rw-r--r--hosts/sif/mail/default.nix10
-rw-r--r--hosts/sif/mail/secrets.yaml6
3 files changed, 9 insertions, 9 deletions
diff --git a/hosts/sif/default.nix b/hosts/sif/default.nix
index b54b6caf..29a91445 100644
--- a/hosts/sif/default.nix
+++ b/hosts/sif/default.nix
@@ -20,7 +20,7 @@
20 nvm0.device = "/dev/disk/by-uuid/fe641e81-0812-4181-a5f6-382ebba509bb"; 20 nvm0.device = "/dev/disk/by-uuid/fe641e81-0812-4181-a5f6-382ebba509bb";
21 nvm1.device = "/dev/disk/by-uuid/43df1ba8-1728-4193-8855-920a82d4494a"; 21 nvm1.device = "/dev/disk/by-uuid/43df1ba8-1728-4193-8855-920a82d4494a";
22 }; 22 };
23 availableKernelModules = [ "drbg" "nvme" "fbcon" "xhci_pci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ]; 23 availableKernelModules = [ "drbg" "nvme" "xhci_pci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
24 kernelModules = [ "dm-raid" "dm-integrity" "dm-snapshot" "dm-thin-pool" ]; 24 kernelModules = [ "dm-raid" "dm-integrity" "dm-snapshot" "dm-thin-pool" ];
25 }; 25 };
26 26
diff --git a/hosts/sif/mail/default.nix b/hosts/sif/mail/default.nix
index 2addba9d..29bfb4f1 100644
--- a/hosts/sif/mail/default.nix
+++ b/hosts/sif/mail/default.nix
@@ -38,23 +38,23 @@
38 /@ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtpin1.ifi.lmu.de:587 38 /@ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtpin1.ifi.lmu.de:587
39 /@(campus\.)?lmu\.de$/ smtp:postout.lrz.de 39 /@(campus\.)?lmu\.de$/ smtp:postout.lrz.de
40 ''}''; 40 ''}'';
41 sender_bcc_maps = ''texthash:${pkgs.writeText "sender_bcc" '' 41 sender_bcc_maps = ''regexp:${pkgs.writeText "sender_bcc" ''
42 uni2work@ifi.lmu.de uni2work@ifi.lmu.de 42 /^uni2work(-[^@]*)?@ifi\.lmu\.de$/ uni2work@ifi.lmu.de
43 @ifi.lmu.de gregor.kleen@ifi.lmu.de 43 /@ifi\.lmu\.de$/ gregor.kleen@ifi.lmu.de
44 ''}''; 44 ''}'';
45 45
46 smtp_sasl_auth_enable = true; 46 smtp_sasl_auth_enable = true;
47 smtp_sender_dependent_authentication = true; 47 smtp_sender_dependent_authentication = true;
48 smtp_sasl_tls_security_options = "noanonymous"; 48 smtp_sasl_tls_security_options = "noanonymous";
49 smtp_sasl_mechanism_filter = ["plain"]; 49 smtp_sasl_mechanism_filter = ["plain"];
50 smtp_sasl_password_maps = "texthash:/var/db/postfix/sasl_passwd"; 50 smtp_sasl_password_maps = "regexp:/var/db/postfix/sasl_passwd";
51 smtp_cname_overrides_servername = false; 51 smtp_cname_overrides_servername = false;
52 smtp_always_send_ehlo = true; 52 smtp_always_send_ehlo = true;
53 smtp_tls_security_level = "dane";
53 54
54 smtp_tls_loglevel = "1"; 55 smtp_tls_loglevel = "1";
55 smtp_dns_support_level = "dnssec"; 56 smtp_dns_support_level = "dnssec";
56 }; 57 };
57 useDane = true;
58 }; 58 };
59 59
60 sops.secrets.postfix-sasl-passwd = { 60 sops.secrets.postfix-sasl-passwd = {
diff --git a/hosts/sif/mail/secrets.yaml b/hosts/sif/mail/secrets.yaml
index 00422f82..06a2ad40 100644
--- a/hosts/sif/mail/secrets.yaml
+++ b/hosts/sif/mail/secrets.yaml
@@ -1,11 +1,11 @@
1sasl-passwd: ENC[AES256_GCM,data:RDZHUgQJHH7IzJD5j+LOuQb4OuPopUEa6CwDRoD/FqoHFW/YKarF3Hxxu4HKA5GDf3SRrFOcPBXmf+0f1CucUQwJQh4nY4fmDVqrH0UXRowuAkIhYpt0sLXlzrOzSeZz788A9xK4AGPzEOx1va7GOqJIaPJ+pyyzazQsSgCJaFkUMriCfKbZ0zhRCr0pk2RPLOLKGuo2mDFf5c3EZYAn7vEzhZj+B3XbNWotV/JXTX7JPK6GPcsX2RMKEYBdmxZzrMCTTFU23W1DbiDJ01mxJh3ckIX+KTmaWNoVg4Tong1vBe2wxKchXajmykwFLJFR1Kj5wv4uAxy2qNvKtQIF/LJosG6LXcdk5QDQBXUINqswupBdV8lt08mk53JHLJPXcV8RpEHT3NUL,iv:2u203xTmUEfWIJDB2ZkOKzhYQrV4TGT7rfOd0md+VOw=,tag:RJ/iLbbq8B8dMmXGWjok/g==,type:str] 1sasl-passwd: ENC[AES256_GCM,data:S81uICROGm/E0TC3xJyPXbVLjOO+PsRyJBoWINFZGzeh8F0nXx1ewiiSXtNl9trTbxlSgf5jnBvtbyd75N0OcyqBf0db5tJtvU42DO5I4qFo4R67FzpKzKWMF4AJuFGP1aKkPsPIc41WTfLemKCfbEhVfQj9qEFLR9TC8iqzSZa0bztCuLoKi0vrAO/4JZnzUe3n7FXy+ER6oYK9JoKwaXc9KYdwQC3QYCby2iSq+GvRs7FL4x6/Zr8FzVCXHYMaW/Qg9dCn/g2NnEnOsH0pEASuKRPJKh8x5dtQg9v3jRK6NIDjEkXeuBnSOaeQiAcYc784foIlI7Q=,iv:zCsYZtU51zJR9XqaCvMtc5aGZwSccIrPzhznubEoEjo=,tag:0/v4Cp/0xLrfEX7H953bOA==,type:str]
2sops: 2sops:
3 kms: [] 3 kms: []
4 gcp_kms: [] 4 gcp_kms: []
5 azure_kv: [] 5 azure_kv: []
6 hc_vault: [] 6 hc_vault: []
7 lastmodified: '2021-01-02T19:29:40Z' 7 lastmodified: '2021-01-18T09:46:15Z'
8 mac: ENC[AES256_GCM,data:g8wNpsFXiGoENSteWa1w1UkF8LQwnwtoeEHskKhGqAlCFtA1cVdyFSItm8/h1/eqJl/NWXRGU25XpZysCAkJi+uCq4bNGjV+gjqeIT8Dv5teQbVwthoFqkE/s3jew35+f29/xxb5Cro6EihlTrs5Lt3wExv2+NUdim1aeNgR+4Q=,iv:bj/igDT7GPiCjj4BwE7ihM8wR8CbJeXu/s550rc+QEw=,tag:KKt6tWlqxu5C/L/ZYbQL3g==,type:str] 8 mac: ENC[AES256_GCM,data:Idvsviv6CGibT+s7TSYUNmYO6gELqahJq33+k8YQhhwDKC6+s3Wqjq3xDkVjPcgq32GQolzmv20s93vQSHVuTKcH9jpXmIlwVZmZFFV7ejuA3QScOqqNNynh1m1ba/eZCGgIZiSlRuv7wqs7wz2uHN9eY3prsDkG1vxpc7UC18g=,iv:S9S/N3vW2TXcNYsc/w+3pDJT+BOQaAw8vgqYwRUtbU4=,tag:jPRXDzy29ewkq/Nzcayfnw==,type:str]
9 pgp: 9 pgp:
10 - created_at: '2021-01-02T19:29:14Z' 10 - created_at: '2021-01-02T19:29:14Z'
11 enc: | 11 enc: |