From 1b36010ad9352d4d32237d745fb5675309b28992 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Fri, 22 Sep 2023 13:46:49 +0200
Subject: [PATCH] mail: disable pam authentication

---
 modules/mail/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/mail/default.nix b/modules/mail/default.nix
index 76957bd..9c1f03e 100644
--- a/modules/mail/default.nix
+++ b/modules/mail/default.nix
@@ -108,7 +108,7 @@ in
           "reject_unauth_destination"
           "reject_unauth_pipelining"
           "reject_invalid_hostname"
-          # "check_policy_service inet:localhost:12340" # disabled since it breaks mails to root@ifsr.de
+          "check_policy_service inet:localhost:12340"
         ];
         smtpd_relay_restrictions = [
           "permit_sasl_authenticated"
@@ -139,6 +139,7 @@ in
       enableQuota = true;
       quotaGlobalPerUser = "10G";
       enableLmtp = true;
+      enablePAM = false;
       mailLocation = "maildir:~/Maildir";
       sslServerCert = "/var/lib/acme/${hostname}/fullchain.pem";
       sslServerKey = "/var/lib/acme/${hostname}/key.pem";