DANE

1 files changed, 4 insertions, 0 deletions

diff --git a/ymir.nix b/ymir.nix
index 66371833..24827e65 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -245,6 +245,7 @@ in rec {
     inherit (pkgs) stdenv nettools openresolv;
     name = "ymir";
     connect = false;
+    useDNS = false;
     ipConf = {
       ip4 = [ { address = "10.141.5.1"; prefixLength = 16; } ];
     };
@@ -379,6 +380,9 @@ in rec {
       #enable TLS logging to see the ciphers for outbound connections
       smtp_tls_loglevel = 1
 
+      smtp_dns_support_level = dnssec
+      smtp_tls_security_level = dane
+
       transport_maps = regexp:${pkgs.writeText "transport" ''
         /^gkleen[@\+]/ uucp:isaac
         /@(lists?|l)\./ mlmmj: