39 lines
924 B
Nix
39 lines
924 B
Nix
{
|
|
config,
|
|
lib,
|
|
myData,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
options.mj.services.postfix = with lib.types; {
|
|
enable = lib.mkEnableOption "Enable postfix";
|
|
saslPasswdPath = lib.mkOption { type = path; };
|
|
};
|
|
|
|
config = lib.mkIf config.mj.services.postfix.enable {
|
|
environment.systemPackages = [ pkgs.mailutils ];
|
|
|
|
services.postfix = {
|
|
enable = true;
|
|
enableSmtp = true;
|
|
networks = [
|
|
"127.0.0.1/8"
|
|
"[::ffff:127.0.0.0]/104"
|
|
"[::1]/128"
|
|
myData.subnets.tailscale.cidr
|
|
];
|
|
hostname = "relay.jakstys.lt";
|
|
extraConfig = ''
|
|
mydestination =
|
|
smtpd_relay_restrictions = permit_mynetworks, reject
|
|
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
|
|
smtp_tls_security_level = may
|
|
smtpd_helo_required = yes
|
|
disable_vrfy_command = yes
|
|
header_size_limit = 4096000
|
|
'';
|
|
};
|
|
};
|
|
}
|