mailserver: Enable postscreen

2023-08-18 15:15:07 +02:00 · 2023-08-18 15:15:07 +02:00 · 30485e7d70
parent 385cf15e02
commit 30485e7d70
1 changed files with 20 additions and 0 deletions
--- a/modules/mailserver/postfix.nix
+++ b/modules/mailserver/postfix.nix
@ -133,6 +133,26 @@ lib.mkIf cfg.enable {
    submissionsOptions = config.services.postfix.submissionOptions;

    masterConfig = {
+      # Postscreen
+      smtpd = {
+        type = "pass";
+      };
+      smtp_inet = {
+        # Partially overrides upstream
+        name = "smtp";
+        type = "inet";
+        private = false;
+        command = lib.mkForce "postscreen";
+        maxproc = 1;
+      };
+      tlsproxy = {
+        maxproc = 0;
+      };
+      dnsblog = {
+        maxproc = 0;
+      };
+
+      # Heder cleanup
      submission-header-cleanup = {
        private = false;
        maxproc = 0;