summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--hosts/surtr/email/default.nix16
1 files changed, 8 insertions, 8 deletions
diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index 59639bec..8eb19b6b 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -146,7 +146,7 @@ in {
146 setSendmail = true; 146 setSendmail = true;
147 postmasterAlias = ""; rootAlias = ""; extraAliases = ""; 147 postmasterAlias = ""; rootAlias = ""; extraAliases = "";
148 settings.main = { 148 settings.main = {
149 recpipient_delimiter = ""; 149 recipient_delimiter = "";
150 mydestination = []; 150 mydestination = [];
151 mynetworks = []; 151 mynetworks = [];
152 myhostname = "surtr.yggdrasil.li"; 152 myhostname = "surtr.yggdrasil.li";
@@ -157,8 +157,6 @@ in {
157 "/run/credentials/postfix.service/surtr.yggdrasil.li.full.pem" 157 "/run/credentials/postfix.service/surtr.yggdrasil.li.full.pem"
158 ]; 158 ];
159 159
160 #enable ECDH
161 smtpd_tls_eecdh_grade = "strong";
162 #enabled SSL protocols, don't allow SSLv2 and SSLv3 160 #enabled SSL protocols, don't allow SSLv2 and SSLv3
163 smtpd_tls_protocols = ["!SSLv2" "!SSLv3" "!TLSv1" "!TLSv1.1"]; 161 smtpd_tls_protocols = ["!SSLv2" "!SSLv3" "!TLSv1" "!TLSv1.1"];
164 smtpd_tls_mandatory_protocols = ["!SSLv2" "!SSLv3" "!TLSv1" "!TLSv1.1"]; 162 smtpd_tls_mandatory_protocols = ["!SSLv2" "!SSLv3" "!TLSv1" "!TLSv1.1"];
@@ -239,7 +237,6 @@ in {
239 237
240 propagate_unmatched_extensions = ["canonical" "virtual" "alias"]; 238 propagate_unmatched_extensions = ["canonical" "virtual" "alias"];
241 smtpd_authorized_verp_clients = ""; 239 smtpd_authorized_verp_clients = "";
242 authorized_verp_clients = "";
243 240
244 smtpd_client_event_limit_exceptions = ""; 241 smtpd_client_event_limit_exceptions = "";
245 242
@@ -256,7 +253,8 @@ in {
256 bounce_queue_lifetime = "20m"; 253 bounce_queue_lifetime = "20m";
257 delay_warning_time = "10m"; 254 delay_warning_time = "10m";
258 255
259 failure_template_file = toString (pkgs.writeText "failure.cf" '' 256 bounce_template_file = pkgs.writeText "bounce.cf" ''
257 failure_template = <<EOF
260 Charset: us-ascii 258 Charset: us-ascii
261 From: Mail Delivery System <MAILER-DAEMON> 259 From: Mail Delivery System <MAILER-DAEMON>
262 Subject: Undelivered Mail Returned to Sender 260 Subject: Undelivered Mail Returned to Sender
@@ -268,8 +266,9 @@ in {
268 be delivered to one or more recipients. It's attached below. 266 be delivered to one or more recipients. It's attached below.
269 267
270 The mail system 268 The mail system
271 ''); 269 EOF
272 delay_template_file = toString (pkgs.writeText "delay.cf" '' 270
271 delay_template = <<EOF
273 Charset: us-ascii 272 Charset: us-ascii
274 From: Mail Delivery System <MAILER-DAEMON> 273 From: Mail Delivery System <MAILER-DAEMON>
275 Subject: Delayed Mail (still being retried) 274 Subject: Delayed Mail (still being retried)
@@ -285,7 +284,8 @@ in {
285 It will be retried until it is $maximal_queue_lifetime_minutes minute(s) old. 284 It will be retried until it is $maximal_queue_lifetime_minutes minute(s) old.
286 285
287 The mail system 286 The mail system
288 ''); 287 EOF
288 '';
289 289
290 smtpd_discard_ehlo_keyword_address_maps = "cidr:${pkgs.writeText "esmtp_access" '' 290 smtpd_discard_ehlo_keyword_address_maps = "cidr:${pkgs.writeText "esmtp_access" ''
291 # Allow DSN requests from local subnet only 291 # Allow DSN requests from local subnet only