From aaf33e220b1412c03b5725abe7cf165c06588fb5 Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Sat, 7 Jun 2025 13:00:03 +0200 Subject: ... --- hosts/sif/mail/default.nix | 70 --------------------------------------------- hosts/sif/mail/secrets.yaml | 30 ------------------- 2 files changed, 100 deletions(-) delete mode 100644 hosts/sif/mail/default.nix delete mode 100644 hosts/sif/mail/secrets.yaml (limited to 'hosts/sif/mail') diff --git a/hosts/sif/mail/default.nix b/hosts/sif/mail/default.nix deleted file mode 100644 index 8d6cd705..00000000 --- a/hosts/sif/mail/default.nix +++ /dev/null @@ -1,70 +0,0 @@ -{ config, lib, pkgs, ... }: -{ - services.postfix = { - enable = true; - enableSmtp = true; - enableSubmission = false; - setSendmail = true; - networksStyle = "host"; - hostname = "sif.midgard.yggdrasil"; - destination = []; - relayHost = "uucp:ymir"; - recipientDelimiter = "+"; - masterConfig = { - uucp = { - type = "unix"; - private = true; - privileged = true; - chroot = false; - command = "pipe"; - args = [ "flags=Fqhu" "user=uucp" ''argv=${config.security.wrapperDir}/uux -z -a $sender - $nexthop!rmail ($recipient)'' ]; - }; - smtps = { - type = "unix"; - private = true; - privileged = true; - chroot = false; - command = "smtp"; - args = [ "-o" "smtp_tls_wrappermode=yes" "-o" "smtp_tls_security_level=encrypt" ]; - }; - }; - config = { - default_transport = "uucp:ymir"; - - inet_interfaces = "loopback-only"; - - authorized_submit_users = ["!uucp" "static:anyone"]; - message_size_limit = "0"; - - sender_dependent_default_transport_maps = ''regexp:${pkgs.writeText "sender_relay" '' - /@(cip|stud)\.ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtp.ifi.lmu.de - /@ifi\.(lmu|uni-muenchen)\.de$/ smtp:smtpin1.ifi.lmu.de:587 - /@math(ematik)?\.(lmu|uni-muenchen)\.de$/ smtps:smtp.math.lmu.de:465 - /@(campus\.)?lmu\.de$/ smtp:postout.lrz.de - ''}''; - sender_bcc_maps = ''regexp:${pkgs.writeText "sender_bcc" '' - /^uni2work(-[^@]*)?@ifi\.lmu\.de$/ uni2work@ifi.lmu.de - /@ifi\.lmu\.de$/ gregor.kleen@ifi.lmu.de - ''}''; - - smtp_sasl_auth_enable = true; - smtp_sender_dependent_authentication = true; - smtp_sasl_tls_security_options = "noanonymous"; - smtp_sasl_mechanism_filter = ["plain"]; - smtp_sasl_password_maps = "regexp:/var/db/postfix/sasl_passwd"; - smtp_cname_overrides_servername = false; - smtp_always_send_ehlo = true; - smtp_tls_security_level = "dane"; - - smtp_tls_loglevel = "1"; - smtp_dns_support_level = "dnssec"; - }; - }; - - sops.secrets.postfix-sasl-passwd = { - key = "sasl-passwd"; - path = "/var/db/postfix/sasl_passwd"; - owner = "postfix"; - sopsFile = ./secrets.yaml; - }; -} diff --git a/hosts/sif/mail/secrets.yaml b/hosts/sif/mail/secrets.yaml deleted file mode 100644 index 3c74b710..00000000 --- a/hosts/sif/mail/secrets.yaml +++ /dev/null @@ -1,30 +0,0 @@ -sasl-passwd: ENC[AES256_GCM,data:L5QOQTEOplm9rQ+PuyDUl492ZTgIgZdRXNCNRaPQ4FLU+ha0GO7rjYWAOtvW7/oVdALrkQveSpBolnLG0nayvkjLpPuA6o9brR6bky52QmhOd8cYN9LMOhJcLJTwpUuvDesXkJD1mWA+ifuPnK6elVEfPuOndzMyw8MEvbPl53yCKQ7HOJc2nGvneD5QFkiHB9W9MmrR1gjGqaCSjZ0ahCnxe/Z2SwqccmBR9l60vt683RXMYbKNLDuSgE7HcXbzF9NstfnoSq7b332y/NgYsXvY0w+f6yPhsDuPhUXU+7gIcPb4+1TFOtdZP8uIPm1aLqG2nNKNhMGt23X8dD5Myy0FF6XmbTj43mDzKJahNel7pT91d+Vac5s08UeyUpQSjtrVMYneVTYbHEwiFPAD7S57LF0kZuE1aXIRF35g6XV3GB4rQDsrBsrZzn9vsGS12L2pdtYFVCvt/dLFlmd/GjPpm4JWyNSg,iv:fUEBrr1iby7+hK8ZesW+77HLMW93c6LpCcoJy8pgXUE=,tag:cW8vKVAebnJqo1gNNwDohQ==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1MVYrR1ZrUXVhYVIvdTdS - OUxoOGhRZ3p2dFhCYkxta1REYy9FWTFEZVNJCjhpQ0VMcWdkWWQ1blZyVVpGWk81 - UVBTZzNKSis2ZVVNdFA4TldvL05oMWcKLS0tIEl0TU8xQUhkTk83dDhzYU5aeCtR - OVcrdFRaeGxZL2kxT3VzUnBtWEI1Y1UK8LwKTus25P/nQrMJG5MOuR/lD2PCgeLC - WYBIbFusX//mwr1nymyWnHXkfXf8uHzpc6rJGFoa+TuOVU3elYB/Pg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1fj65apkhfkrwyv5tx6zcs9nkjg8267fy733qph30sc7zfn7vapjqkd5kne - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQcUs2OGp6WWN5cm9IVDdx - TFRpZTJXQjBXeGp3RytPaFdjR3UyVURnYmhZCnh3SDNYR0J1US9vcEhTbmJCNm5r - emJReml2QTNkTC93M0lpYlpNbTc4TGsKLS0tIGZ4YkE4STQ2dmh4akJVcnZOUVhT - MTNrOGxqZmFWSnl0U3lVTnllbEFTN28KKv/W6tk2YlNQV8fotfjSLg1HOs6OdMj4 - GkZ30jQYfwmFYEA8YPn9JXbVNpprXd0d6ufLl/tAQckT6lsqGhwzeg== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2022-02-02T14:45:23Z" - mac: ENC[AES256_GCM,data:UdM/VmdfqhYm1aFCHaO0mbJA/oyV/J2oKVVmGDa0Co3MWq9aWMqP726O+rLk36W0HOG4fmue//R1Q524au2hMW9bZUFzrubfQt2V78tZRZeHCJSRmOmi1D1EDdfPz9J3oWDvIEgIIsAk5H5EuuH0j6FILye6tzcomNGDAKZbwuc=,iv:a7dJAqkcroLp01gkGKV5gm6gTIIMa/9P8qJn44ISrw0=,tag:R9/6X6mgfVSLK7bmoWRnfQ==,type:str] - pgp: [] - unencrypted_suffix: _unencrypted - version: 3.7.1 -- cgit v1.2.3