From f75a808a533089b24812d290203133f4bc336e7f Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Wed, 30 Oct 2024 11:01:23 +0100
Subject: [PATCH] fix postfix tls level

---
 hosts/falkenstein/modules/mail/postfix.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/falkenstein/modules/mail/postfix.nix b/hosts/falkenstein/modules/mail/postfix.nix
index 7cab1a4..3e695c4 100644
--- a/hosts/falkenstein/modules/mail/postfix.nix
+++ b/hosts/falkenstein/modules/mail/postfix.nix
@@ -40,7 +40,8 @@ in
         smtp_helo_name = config.networking.fqdn;
         smtpd_banner = "${config.networking.fqdn} ESMTP $mail_name";
         smtp_tls_security_level = "may";
-        smtpd_tls_security_level = lib.mkForce "encrypt";
+        # forcing encryption breaks rspamd
+        smtpd_tls_security_level = "may";
         smtpd_tls_auth_only = true;
         smtpd_tls_protocols = [
           "!SSLv2"