wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Packages Projects Releases Wiki Activity

add mail filters

Browse source
This commit is contained in:
Rouven Seifert 2022-12-17 19:45:36 +01:00
parent 14ad30e65d
commit 2a0e2c6623
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
1 changed files with 9 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
modules/mail.nix
View file

@ -3,7 +3,8 @@
hostname = "mail.test.stramke.com"; hostname = "mail.test.stramke.com";
domain = "test.stramke.com"; domain = "test.stramke.com";
in { in {
networking.firewall.allowedTCPPorts = [ 25 587 143 ]; networking.firewall.allowedTCPPorts = [ 25 587 143 11334];
users.users.postfix.extraGroups = ["rspamd"]; # doesn't seem to work
services = { services = {
postfix = { postfix = {
enable = true; enable = true;
@ -13,7 +14,6 @@
origin = "${domain}"; origin = "${domain}";
destination = ["${hostname}" "${domain}" "localhost"]; destination = ["${hostname}" "${domain}" "localhost"];
config = { config = {
mynetworks = "168.119.135.69/32 10.0.0.0/24 0.0.0.0/0 127.0.0.1";
smtpd_recipient_restrictions = [ smtpd_recipient_restrictions = [
"reject_unauth_destination" "reject_unauth_destination"
"permit_sasl_authenticated" "permit_sasl_authenticated"
@ -21,7 +21,11 @@
]; ];
smtpd_sasl_auth_enable = true; smtpd_sasl_auth_enable = true;
smtpd_sasl_path = "/var/lib/postfix/auth"; smtpd_sasl_path = "/var/lib/postfix/auth";
# smtpd_sasl_type = "dovecot";
# put in opendkim (port 8891) and rspamd (port 11334) as mail filter
smtpd_milters = ["inet:localhost:8891" "/run/rspamd/rspamd.sock"];
non_smtpd_milters = "$smtpd_milters";
milter_default_action = "accept";
}; };
}; };
dovecot2 = { dovecot2 = {
@ -69,8 +73,9 @@
}; };
opendkim = { opendkim = {
enable = true; enable = true;
selector = "mail"; selector = "default";
domains = "csl:${domain}"; domains = "csl:${domain}";
socket = "inet:8891";
}; };
}; };
} }