modules/mail.nix

@@ -2,9 +2,9 @@
 let
   hostname = "mail.test.stramke.com";
   domain = "test.stramke.com";
-    in {
+in
-        networking.firewall.allowedTCPPorts = [ 25 587 143 11334];
+{
-        users.users.postfix.extraGroups = ["rspamd"]; # doesn't seem to work
+  networking.firewall.allowedTCPPorts = [ 25 587 143 ];
   services = {
     postfix = {
       enable = true;
@@ -22,8 +22,8 @@
         smtpd_sasl_auth_enable = true;
         smtpd_sasl_path = "/var/lib/postfix/auth";
 
-                    # put in opendkim (port 8891) and rspamd (port 11334) as mail filter
+        # put in opendkim (port 8891) and rspamd (port 11333) as mail filter
-                    smtpd_milters = ["inet:localhost:8891" "/run/rspamd/rspamd.sock"];
+        smtpd_milters = [ "inet:localhost:8891" "inet:localhost:11333" ];
         non_smtpd_milters = "$smtpd_milters";
         milter_default_action = "accept";
       };
@@ -70,6 +70,14 @@
     };
     rspamd = {
       enable = true;
+      workers = {
+        normal = {
+          bindSockets = [ "*:11333" ]; # interface for the mailfilter
+        };
+        controller = {
+          bindSockets = [ "*:11334" ]; # webinterface
+        };
+      };
     };
     opendkim = {
       enable = true;