all repos — nixfiles @ 2bd04992e0e8bb625f9be4e873bb9ef39b1c3668

System and user configuration, managed by nix and home-manager

linde: replace opendkim with rspamd

Alin
commit

2bd04992e0e8bb625f9be4e873bb9ef39b1c3668

parent

83346e95f857eb39cfde59376fce636b49b98e28

1 file changed, 23 insertions(+), 12 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -498,24 +498,35 @@ mydestination = [ ];
inet_interfaces = "loopback-only"; smtp_bind_address = "0.0.0.0"; smtp_bind_address6 = "::"; - milter_protocol = 2; - smtpd_milters = "unix:/run/opendkim/opendkim.sock"; - non_smtpd_milters = "$smtpd_milters"; - milter_default_action = "tempfail"; }; }; }; - services.opendkim = { + services.rspamd = { enable = true; - domains = "csl:${hostname}.${domain},${domain}"; - selector = "202511"; - socket = "local:/run/opendkim/opendkim.sock"; - settings = { - mode = "s"; - umask = "002"; + postfix = { + enable = true; + }; + locals = { + "outgoing.conf".text = '' + outbound { + priority = high; + authenticated = yes; + apply { + groups_disabled = ["rbl", "spf", "dmarc"]; + actions { + greylist = null; + } + } + } + ''; + "dkim_signing.conf".text = '' + enabled = true; + selector = "202602"; + domain = "alin.ovh"; + path = "/var/dkim/$domain.$selector.key"; + ''; }; }; - users.groups.opendkim.members = [ "postfix" ]; systemd.services.backup-gitolite = { startAt = "daily";