mailserver: Enable postscreen

modules/mailserver/postfix.nix

@@ -133,6 +133,26 @@ lib.mkIf cfg.enable {
     submissionsOptions = config.services.postfix.submissionOptions;
 
     masterConfig = {
+      # Postscreen
+      smtpd = {
+        type = "pass";
+      };
+      smtp_inet = {
+        # Partially overrides upstream
+        name = "smtp";
+        type = "inet";
+        private = false;
+        command = lib.mkForce "postscreen";
+        maxproc = 1;
+      };
+      tlsproxy = {
+        maxproc = 0;
+      };
+      dnsblog = {
+        maxproc = 0;
+      };
+
+      # Heder cleanup
       submission-header-cleanup = {
         private = false;
         maxproc = 0;