From 30485e7d70560a148afe27cbb036b0150ef1883a Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Fri, 18 Aug 2023 15:15:07 +0200
Subject: [PATCH] mailserver: Enable postscreen

---
 modules/mailserver/postfix.nix | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/modules/mailserver/postfix.nix b/modules/mailserver/postfix.nix
index 3311674..693940b 100644
--- a/modules/mailserver/postfix.nix
+++ b/modules/mailserver/postfix.nix
@@ -133,6 +133,26 @@ lib.mkIf cfg.enable {
     submissionsOptions = config.services.postfix.submissionOptions;
 
     masterConfig = {
+      # Postscreen
+      smtpd = {
+        type = "pass";
+      };
+      smtp_inet = {
+        # Partially overrides upstream
+        name = "smtp";
+        type = "inet";
+        private = false;
+        command = lib.mkForce "postscreen";
+        maxproc = 1;
+      };
+      tlsproxy = {
+        maxproc = 0;
+      };
+      dnsblog = {
+        maxproc = 0;
+      };
+
+      # Heder cleanup
       submission-header-cleanup = {
         private = false;
         maxproc = 0;