kopatz/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cli and domain

Browse Source
This commit is contained in:
Kopatz
2025-09-16 20:44:06 +02:00
parent 686c4782f1
commit 53d8df2632
3 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
systems/amd-server-vm/mail.nix
View File

@@ -44,6 +44,7 @@ in
"-o smtpd_tls_security_level=encrypt"
"-o smtpd_sasl_auth_enable=yes"
"-o smtpd_client_restrictions=permit_sasl_authenticated,reject"
# TODO: look into check_sender_access hash:/etc/postfix/sender_access
"-o smtpd_sender_restrictions=reject_unknown_sender_domain"
"-o smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject"
"-o smtpd_relay_restrictions=permit_sasl_authenticated,reject"
@@ -81,8 +82,6 @@ in
smtp_tls_ciphers = "high"; # ciphers used in opportunistic TLS
smtp_tls_exclude_ciphers = "aNULL, MD5, DES"; # exclude weak ciphers
smtp_tls_protocols = ">=TLSv1.2";
# displays TLS information in the E-Mail header
smtp_tls_received_header = "yes";
smtp_tls_note_starttls_offer = "yes"; # log the hostname of remote servers that offer STARTTLS
# TLS logging
smtpd_tls_loglevel = 1;