From 8b1ac25da8313861252e6015f3827d752d9dd8d9 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sat, 21 Mar 2026 15:43:47 +0100
Subject: ...

---
 hosts/surtr/email/ccert-policy-server/pyproject.toml | 2 +-
 hosts/surtr/email/default.nix                        | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

(limited to 'hosts/surtr/email')

diff --git a/hosts/surtr/email/ccert-policy-server/pyproject.toml b/hosts/surtr/email/ccert-policy-server/pyproject.toml
index e93c910e..518bd4f9 100644
--- a/hosts/surtr/email/ccert-policy-server/pyproject.toml
+++ b/hosts/surtr/email/ccert-policy-server/pyproject.toml
@@ -27,4 +27,4 @@ build-backend = "uv_build"
 
 [tool.uv.build-backend]
 module-root = "."
-module-name = []
+module-name = ["ccert_policy_server"]
diff --git a/hosts/surtr/email/default.nix b/hosts/surtr/email/default.nix
index 4c7af0c3..4243366c 100644
--- a/hosts/surtr/email/default.nix
+++ b/hosts/surtr/email/default.nix
@@ -454,6 +454,8 @@ in {
             milter = yes;
             timeout = 120s;
 
+            client_ca_name = "yggdrasil.li";
+
             upstream "local" {
               default = yes;
               self_scan = yes;
@@ -491,6 +493,9 @@ in {
           servers = "${config.services.redis.servers.rspamd.unixSocket}";
         '';
         "dkim_signing.conf".text = ''
+          enabled = true;
+          allow_username_mismatch = true;
+
           path = "/var/lib/rspamd/dkim/$domain.key";
           selector = "mail";
         '';
@@ -514,6 +519,9 @@ in {
               spam = true;
           }
         '';
+        "logging.inc".text = ''
+          debug_modules = ["milter", "dkim_signing"];
+        '';
         # "redirectors.inc".text = ''
         #   visit.creeper.host
         # '';
-- 
cgit v1.2.3