From 355b6d4ec02ad535b93ce314dd5734e8c6028dbc Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sun, 15 May 2022 14:41:49 +0200
Subject: surtr: ...

---
 hosts/surtr/email/default.nix | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

(limited to 'hosts/surtr/email/default.nix')

diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index 2ddff519..57883864 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -37,7 +37,7 @@ in {
     services.postfix = {
       enable = true;
       hostname = "surtr.yggdrasil.li";
-      recipientDelimiter = "+";
+      recipientDelimiter = "";
       setSendmail = true;
       postmasterAlias = ""; rootAlias = ""; extraAliases = "";
       destination = [];
@@ -100,6 +100,11 @@ in {
           "reject_unauth_pipelining"
           "reject_non_fqdn_recipient"
           "reject_unknown_recipient_domain"
+          "check_recipient_access pgsql:${pkgs.writeText "check_recipient_access.cf" ''
+            hosts = postgresql:///email
+            dbname = email
+            query = SELECT action FROM virtual_mailbox_access WHERE lookup = '%s'
+          ''}"
           "permit_mynetworks"
           "check_ccert_access ${relay_ccert}"
           "reject_non_fqdn_helo_hostname"
@@ -156,7 +161,8 @@ in {
           dbname = email
           query = SELECT 1 FROM virtual_mailbox_mapping WHERE lookup = '%s'
         ''}'';
-        virtual_transport = "lmtp:unix:/run/postfix/dovecot-lmtp";
+        dvlmtp_destination_recipient_limit = "1";
+        virtual_transport = "dvlmtp:unix:/run/postfix/dovecot-lmtp";
       };
       masterConfig = {
         smtps = {
@@ -174,6 +180,12 @@ in {
             "-o" ''smtpd_milters=${config.services.opendkim.socket}''
           ];
         };
+        dvlmtp = {
+          command = "lmtp";
+          args = [
+            "flags=DORX"
+          ];
+        };
       };
     };
 
@@ -375,7 +387,7 @@ in {
             args = ${pkgs.writeText "dovecot-sql.conf" ''
               driver = pgsql
               connect = dbname=email
-              user_query = SELECT DISTINCT ON (local IS NULL) "user", quota_rule, 'dovecot2' as uid, 'dovecot2' as gid FROM lmtp_mapping WHERE (local = '%n' AND domain = '%d') OR (local IS NULL AND domain = '%d') ORDER BY (local IS NULL) ASC
+              user_query = SELECT DISTINCT ON (extension IS NULL, local IS NULL) "user", quota_rule, 'dovecot2' as uid, 'dovecot2' as gid FROM lmtp_mapping WHERE CASE WHEN extension IS NOT NULL AND local IS NOT NULL THEN ('%n' :: citext) = local || '+' || extension AND domain = ('%d' :: citext) WHEN local IS NOT NULL THEN (local = ('%n' :: citext) OR ('%n' :: citext) ILIKE local || '+%%') AND domain = ('%d' :: citext) WHEN extension IS NOT NULL THEN ('%n' :: citext) ILIKE '%%+' || extension AND domain = ('%d' :: citext) ELSE domain = ('%d' :: citext) END ORDER BY (extension IS NULL) ASC, (local IS NULL) ASC
             ''}
 
             skip = never
@@ -387,7 +399,8 @@ in {
         mail_plugins = $mail_plugins quota
         mailbox_list_index = yes
         postmaster_address = postmaster@yggdrasil.li
-        recipient_delimiter = +
+        recipient_delimiter = 
+        auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-+_@
 
         service lmtp {
           vsz_limit = 1G
-- 
cgit v1.2.3