all repos — nixfiles @ b97a40834d1b2b180942ad84e0aee88100946ae7

System and user configuration, managed by nix and home-manager

linde: sign outgoing mail with DKIM

Alan Pearce
commit

b97a40834d1b2b180942ad84e0aee88100946ae7

parent

7fb219076baa9105e256d6e00d7175fe0fe4e7a4

1 file changed, 15 insertions(+), 0 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -486,6 +486,10 @@ mydestination = [ ];
         inet_interfaces = "loopback-only";
         smtp_bind_address = "0.0.0.0";
         smtp_bind_address6 = "::";
+        milter_protocol = 2;
+        smtpd_milters = "unix:/run/opendkim/opendkim.sock";
+        non_smtpd_milters = "$smtpd_milters";
+        milter_default_action = "tempfail";
       };
       master."10.88.0.1:587" = {
         type = "inet";

@@ -504,6 +508,17 @@ ];
       };
     };
   };
+  services.opendkim = {
+    enable = true;
+    domains = "csl:${hostname}.${domain},${domain}";
+    selector = "202511";
+    socket = "local:/run/opendkim/opendkim.sock";
+    settings = {
+      mode = "s";
+      umask = "002";
+    };
+  };
+  users.groups.opendkim.members = [ "postfix" ];
 
   systemd.services.backup-gitolite = {
     startAt = "daily";