all repos — nixfiles @ 0f401029b13951d31e6eaba0141439ea5ddefb36

System and user configuration, managed by nix and home-manager

extract mailer role

Alin
commit

0f401029b13951d31e6eaba0141439ea5ddefb36

parent

8db1a449d251b727bc7d2e4e6cd88f3ac7ccb690

1 file changed, 1 insertion(+), 49 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -36,6 +36,7 @@ ../roles/auth-dns.nix
     ../roles/binary-cache.nix
     ../roles/forgejo-runner.nix
     ../roles/goatcounter.nix
+    ../roles/mailer.nix
     ../roles/readeck.nix
     ../roles/searchix.nix
     ../roles/sso.nix

@@ -283,55 +284,6 @@
   services.powerdns.extraConfig = ''
     local-address=${net-ip4} ${net-ip6}
   '';
-
-  services.postfix = {
-    enable = true;
-    enableSubmission = true;
-    submissionOptions = {
-      smtpd_client_restrictions = "permit_inet_interfaces,reject";
-      smtpd_tls_security_level = "none";
-    };
-    enableSubmissions = true;
-    virtual = ''
-      @${config.networking.hostName}.${domain} alin
-      alin ${email}
-    '';
-    settings = {
-      main = {
-        mydomain = domain;
-        mydestination = [ ];
-        inet_interfaces = "loopback-only";
-        smtp_bind_address = "0.0.0.0";
-        smtp_bind_address6 = "::";
-      };
-    };
-  };
-  services.rspamd = {
-    enable = true;
-    postfix = {
-      enable = true;
-    };
-    locals = {
-      "outgoing.conf".text = ''
-        outbound {
-          priority = high;
-          authenticated = yes;
-          apply {
-            groups_disabled = ["rbl", "spf", "dmarc"];
-            actions {
-              greylist = null;
-            }
-          }
-        }
-      '';
-      "dkim_signing.conf".text = ''
-        enabled = true;
-        selector = "202602";
-        domain = "alin.ovh";
-        path = "/var/dkim/$domain.$selector.key";
-      '';
-    };
-  };
 
   systemd.services.backup-gitolite = {
     startAt = "daily";