From ff6d6d3b3ede0001cf4c3d8259703a41749166be Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sun, 16 Aug 2020 14:25:49 +0200
Subject: ymir: fix postfix dane

---
 ymir.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'ymir.nix')

diff --git a/ymir.nix b/ymir.nix
index 934c2374..4adaf128 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -444,6 +444,7 @@ in rec {
       ''}''];
     sslCert = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     sslKey = "/var/lib/acme/yggdrasil.li/key.pem";
+    useDANE = true;
     config = {
       #the dh params
       smtpd_tls_dh1024_param_file = config.security.dhparams.params."postfix-1024".path;
@@ -469,7 +470,6 @@ in rec {
       smtp_tls_loglevel = "1";
 
       smtp_dns_support_level = "dnssec";
-      smtp_tls_security_level = "dane";
 
       transport_maps = ''regexp:${pkgs.writeText "transport" ''
         /@(rpgs?|lists?|l)\.(.*\.)?(yggdrasil\.li|praseodym\.org|141\.li|xmpp\.li|kleen\.li|dirty-haskell\.org|nights\.email|yggdrasil|localdomain|localhost|ymir)$/ mlmmj:
-- 
cgit v1.2.3