From ebe977672a5665fe8d25138032db1ca791e9aae0 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Fri, 26 Apr 2024 22:40:18 +0200
Subject: [PATCH] mailman: restrict registration to tud nets

---
 modules/mail/mailman.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/modules/mail/mailman.nix b/modules/mail/mailman.nix
index f9a9354..23d36a9 100644
--- a/modules/mail/mailman.nix
+++ b/modules/mail/mailman.nix
@@ -66,6 +66,14 @@
     ensureDatabases = [ "mailman" "mailman-web" ];
   };
   services.nginx.virtualHosts."lists.${config.networking.domain}" = {
+    locations."/accounts/signup" = {
+      extraConfig = ''
+        allow 141.30.0.0/16;
+        allow 141.76.0.0/16;
+        deny all;
+        uwsgi_pass unix:/run/mailman-web.socket;
+      '';
+    };
     locations."/robots.txt" = {
       extraConfig = ''
         add_header  Content-Type  text/plain;