Fachschaft/nixConfig
6
2
Fork 2
Code Issues 10 Pull requests 2 Projects Wiki Activity

Compare commits

base: Fachschaft:590ea741d09f64ccf8f12ac17c9e37602c4af582
Branches Tags
Fachschaft:main
..
compare: Fachschaft:d7f4598be3075f6a8b700db5fae6db6422b64bac
Branches Tags
Fachschaft:main

1 commit
590ea741d0 ... d7f4598be3

Author SHA1 Message Date
Gonne
d7f4598be3 Group config parameters 2025-03-02 13:38:51 +01:00
1 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

32
nixos/modules/mail.nix
View file

@ -156,21 +156,6 @@ in {
};
session = {
rcpt = {
# In order to accept mail that we only forward
# without having to generate an account.
# Invalid addresses are filtered by DFN beforehand.
# See also https://stalw.art/docs/smtp/inbound/rcpt/#catch-all-addresses
catch-all = true;
relay = [
{
"if" = "!is_empty(authenticated_as) || rcpt_domain == 'lists.mathebau.de' || starts_with(remote_ip, '192.168.0.')"; #TODO restrict trust by IP
"then" = true;
}
{"else" = false;}
];
};
ehlo.require = [
{
"if" = "starts_with(remote_ip, '192.168.0.')"; #TODO setup vms properly
@ -185,6 +170,22 @@ in {
}
{"else" = true;}
];
rcpt = {
# In order to accept mail that we only forward
# without having to generate an account.
# Invalid addresses are filtered by DFN beforehand.
# See also https://stalw.art/docs/smtp/inbound/rcpt/#catch-all-addresses
catch-all = true;
relay = [
{
"if" = "!is_empty(authenticated_as) || rcpt_domain == 'lists.mathebau.de' || starts_with(remote_ip, '192.168.0.')"; #TODO restrict trust by IP
"then" = true;
}
{"else" = false;}
];
};
data.script = "'redirects'";
};
# Stalwart gets its configuration from two places: A TOML configuration file that we control in this module
@ -229,7 +230,6 @@ in {
out-messages = 50;
};
};
session.data.script = "'redirects'";
# See https://stalw.art/docs/smtp/authentication/dkim/sign
# We need two blocks per domain because the domain setting in the blocks does not accept variables like `sender_domain`.