"Fix" postfix config
This commit is contained in:
parent
5065337276
commit
f416d33acf
1 changed files with 6 additions and 5 deletions
|
@ -1,6 +1,5 @@
|
||||||
{ config, lib, ... }:
|
{ config, lib, ... }:
|
||||||
let
|
let certPath = "/var/lib/acme/hera.m-0.eu";
|
||||||
certPath = "/var/lib/acme/hera.m-0.eu";
|
|
||||||
in {
|
in {
|
||||||
networking.firewall = { allowedTCPPorts = [ 25 143 587 993 ]; };
|
networking.firewall = { allowedTCPPorts = [ 25 143 587 993 ]; };
|
||||||
|
|
||||||
|
@ -67,9 +66,11 @@ in {
|
||||||
postfix = {
|
postfix = {
|
||||||
networks = [ "[${config.m-0.prefix}::]/64" "10.0.0.0/24" ];
|
networks = [ "[${config.m-0.prefix}::]/64" "10.0.0.0/24" ];
|
||||||
transport = "email2matrix.maralorn.de smtp:[::1]:2525";
|
transport = "email2matrix.maralorn.de smtp:[::1]:2525";
|
||||||
extraConfig = ''
|
config = {
|
||||||
smtpd_tls_loglevel = 2
|
# Allow TLSv1 because we need to be able to receive mail from legacy servers.
|
||||||
'';
|
smtpd_tls_protocols = lib.mkForce
|
||||||
|
"TLSv1.3, TLSv1.2, TLSv1.1, TLSv1, !SSLv2, !SSLv3";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
opendkim.keyPath = "/var/dkim";
|
opendkim.keyPath = "/var/dkim";
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue