Commit graph

102 commits

Author SHA1 Message Date
4c946968e1 Hack around sieve execution for multiple recipients. 2025-03-04 07:39:36 +01:00
67d8132606 Only set original sender for MAIL FROM 2025-03-03 14:49:42 +01:00
b3a0936e30 Alias file update 2025-03-03 12:58:49 +01:00
c5849b8695 Group config parameters 2025-03-02 20:37:52 +01:00
654922c40a Enable DKIM signing 2025-03-02 14:03:36 +01:00
a486d42e1c Filter out catch-all addresses of the form "@domain.tld" from the allowlist that are not intended for HRZ 2025-03-02 14:03:36 +01:00
74e5df98b1 Set sender and increase redirect limit for our alias file 2025-03-02 14:03:32 +01:00
b2c89091d8 Accept mail from our badly configured VMs 2025-03-02 08:43:26 +01:00
bdd88e748b Add mathebau.de to certificate 2025-03-02 08:43:26 +01:00
2dda609464 Rename config option after update beyond version 0.11.2 2025-03-02 08:43:22 +01:00
0cc1a1fb85 Disable matheball.de forwards and submission to mail allowlist until we actually handle it 2025-03-02 08:43:22 +01:00
22b15d0eef Allow unpacking stalwart's webadmin interface 2025-03-02 08:43:22 +01:00
f086234f51 Delete directive proxy_interface
This directive is supposed to prevent mail delivery loops that would be caused by portforwarding to itself.
Behind this ip address, however, there is our general mail vm and not immediately the mailinglist setup.
2025-03-02 08:43:22 +01:00
753b34592c Increase root file system to make space for /tmp folder which needs lots of space during builds 2025-02-27 16:00:24 +00:00
cc91339f80 Address second round of review 2025-02-27 16:55:14 +01:00
361eed84af Rename machine to Nyarlathotep 2025-02-26 18:04:27 +01:00
70b3a694c4 Submit mailing list mails to correct vm based on port forwarding and run allowlist job less often 2025-02-26 12:34:44 +01:00
f0e584e239 Add patch to allow alias files to redirect to their sender 2025-02-26 12:34:44 +01:00
5a80d86bd3 Post mailaddresses to HRZ allowlist 2025-02-26 12:34:44 +01:00
7796b7aa00 Add mail forwarding based on alias files 2025-02-26 12:34:44 +01:00
d7b8f935cd Add basic mailserver configuration 2025-02-26 12:34:44 +01:00
2aa93c98f5 Add basic machine config for kaalut, a new mail vm 2025-02-26 12:34:44 +01:00
882a8ea189 Add our own package to inputs that converts an alias file to a sieve script.
Remove the simple nixos mailserver dependency thet we won't use.
2025-02-26 12:34:39 +01:00
77bdd979b0 Align file system layout to new naming policy 2025-02-20 16:37:46 +01:00
35707122fa Add Nodens, a VM to install NixOS VMs 2025-02-20 16:37:32 +01:00
51c83c8ec0 Pass pkgs to machine configs to enable installation of packages there 2025-02-20 16:31:55 +01:00
ac85711356 Entferne Backupconfig für die Matheballwebseite
Die Bilder, die gesichert wurden, liegen jetzt alle im Git-Repo der Webseite
2024-10-16 16:32:06 +00:00
ec46a28278
nix config to save some space 2024-10-15 13:19:23 +02:00
e7154785dd Disable TLS behind proxies and relays 2024-10-12 14:10:01 +00:00
ace96d5f7c Restrict HRZ allowlist update service privileges 2024-10-12 14:10:01 +00:00
b50d7d0e6a Mailman backups 2024-10-12 14:10:01 +00:00
b9b7a1fa58 Add pushing to hrz allowlist 2024-10-12 14:10:01 +00:00
1ab6e5d868 Setze Mailman-Maschine auf 2024-10-12 14:10:01 +00:00
0550754cdd nix flake update
Allows insecure package jitsi-meet (see https://github.com/NixOS/nixpkgs/pull/334638)
2024-10-12 13:30:00 +02:00
575343c844 Unify hook settings and fix warning
trace: warning: The option `settings.statix' defined in `/nix/store/plj05iykqma26y930qjf75zxp2qx02sl-source/flake.nix, via option perSystem' has been renamed to `hooks.statix.settings'.
2024-07-02 16:03:14 +02:00
e5a9653f39 nix flake update
In particular contains https://github.com/NixOS/nixpkgs/pull/323753 (This time for real)
2024-07-02 15:52:10 +02:00
367cbeed0a nix flake update
Especially contains https://github.com/NixOS/nixpkgs/pull/323753
2024-07-01 21:32:35 +02:00
495c580653 nix flake update 2024-06-24 09:50:31 +02:00
c739e6f48b nix flake update 2024-06-12 09:13:19 +02:00
d1483131b8 Tausche Gonnes SSH-Key 2024-04-26 18:10:24 +02:00
47fd90c602 nix flake update 2024-04-26 18:09:29 +02:00
e69c8c6efb Remove obsolete DNS resolver 2024-04-03 15:38:50 +02:00
7bc8261cb6 Also sync deletion of files from fsaccount before taking the backup 2024-04-03 15:38:50 +02:00
e91f417a29 Move secrets to machine config 2024-04-03 15:38:50 +02:00
cabd210aa6
[#33] Refactored existing network config 2024-04-02 16:01:57 +02:00
326cc52c2e Feedback: more comments 2024-03-30 19:52:11 +01:00
1bf59168fb Use sops for private key distribution 2024-03-30 09:01:16 +01:00
e340a7eb75 Address Feedback 2024-03-30 09:01:16 +01:00
b0af48a9d0 Backup des Fachschaftsaccounts 2024-03-30 09:01:16 +01:00
b7b0e07f44 Create backuphost Bragi 2024-03-30 09:01:16 +01:00