Gonne/nixConfig
1
0
Fork 0
forked from Fachschaft/nixConfig
Code Pull requests Activity

Compare commits

base: Gonne:1de36855841c170c843330e00c49ec52c38f888b
Branches Tags
Gonne:main
Gonne:updates
Fachschaft:main
..
compare: Gonne:cc91339f800abc946258507c8808f54e70aaf013
Branches Tags
Gonne:updates
Gonne:main
Fachschaft:main

No commits in common. "1de36855841c170c843330e00c49ec52c38f888b" and "cc91339f800abc946258507c8808f54e70aaf013" have entirely different histories.
1de3685584 ... cc91339f80

2 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/mail.nix
View file

@ -148,7 +148,6 @@ in {
# In order to accept mail that we only forward # In order to accept mail that we only forward
# without having to generate an account. # without having to generate an account.
# Invalid addresses are filtered by DFN beforehand. # Invalid addresses are filtered by DFN beforehand.
# See also https://stalw.art/docs/smtp/inbound/rcpt/#catch-all-addresses
catch-all = true; catch-all = true;
relay = [ relay = [
{ {
@ -268,7 +267,6 @@ in {
"stalwart-mail" = { "stalwart-mail" = {
restartTriggers = lib.attrsets.mapAttrsToList (_: aliaslist: aliaslist.sopsFile) config.sops.secrets; # restart if secrets, especially alias files, have changed. restartTriggers = lib.attrsets.mapAttrsToList (_: aliaslist: aliaslist.sopsFile) config.sops.secrets; # restart if secrets, especially alias files, have changed.
serviceConfig.PrivateTmp = lib.mkForce false; # enable access to generated Sieve script serviceConfig.PrivateTmp = lib.mkForce false; # enable access to generated Sieve script
serviceConfig.ProtectSystem = lib.mkForce "full"; # "strict" does not allow writing to /tmp which we need for unpacking the webadmin interface. "full" is less strict.
}; };
"virt-aliases-generator" = { "virt-aliases-generator" = {
description = "Virtual Aliases Generator: Generate a sieve script from the virtual alias file"; description = "Virtual Aliases Generator: Generate a sieve script from the virtual alias file";

1
nixos/modules/mailman.nix
View file

@ -32,6 +32,7 @@ in {
config = { config = {
transport_maps = ["hash:/var/lib/mailman/data/postfix_lmtp"]; transport_maps = ["hash:/var/lib/mailman/data/postfix_lmtp"];
local_recipient_maps = ["hash:/var/lib/mailman/data/postfix_lmtp"]; local_recipient_maps = ["hash:/var/lib/mailman/data/postfix_lmtp"];
proxy_interfaces = "130.83.2.184";
smtputf8_enable = "no"; # HRZ does not know SMTPUTF8 smtputf8_enable = "no"; # HRZ does not know SMTPUTF8
}; };
relayHost = "mathebau.de"; # Relay to mail vm which relays to HRZ (see https://www.hrz.tu-darmstadt.de/services/it_services/email_infrastruktur/index.de.jsp) relayHost = "mathebau.de"; # Relay to mail vm which relays to HRZ (see https://www.hrz.tu-darmstadt.de/services/it_services/email_infrastruktur/index.de.jsp)