Personal-use NixOS configuration
Add insecure auth for maddy on localhost
+51
-31
+51
-31
config/server/groupware/maddy.nix
+51
-31
config/server/groupware/maddy.nix
···
24
24
}
25
25
];
26
26
};
27
+
28
+
smtpConfig = ''
29
+
limits {
30
+
all rate 25 1s
31
+
}
32
+
33
+
auth &local_authdb
34
+
35
+
source $(local_domains) {
36
+
check {
37
+
authorize_sender {
38
+
prepare_email &local_rewrites
39
+
user_to_email identity
40
+
}
41
+
}
42
+
43
+
destination postmaster $(local_domains) {
44
+
deliver_to &local_routing
45
+
}
46
+
47
+
default_destination {
48
+
modify {
49
+
dkim $(primary_domain) $(local_domains) default
50
+
}
51
+
52
+
deliver_to &remote_queue
53
+
}
54
+
}
55
+
56
+
default_source {
57
+
reject 501 5.1.8 "Non-local sender domain"
58
+
}
59
+
'';
60
+
61
+
imapConfig = ''
62
+
auth &local_authdb
63
+
storage &local_mailboxes
64
+
'';
27
65
in
28
66
{
29
67
imports = [
···
87
125
msgpipeline local_routing {
88
126
check {
89
127
rspamd {
90
-
api_path unix:/run/rspamd/rspamd.sock
128
+
api_path /run/rspamd/rspamd.sock
91
129
}
92
130
}
93
131
···
134
172
}
135
173
136
174
submission tls://0.0.0.0:465 tcp://0.0.0.0:587 {
137
-
limits {
138
-
all rate 25 1s
139
-
}
175
+
${smtpConfig}
176
+
}
140
177
141
-
auth &local_authdb
178
+
submission tcp://127.0.0.1:365 {
179
+
${smtpConfig}
142
180
143
-
source $(local_domains) {
144
-
check {
145
-
authorize_sender {
146
-
prepare_email &local_rewrites
147
-
user_to_email identity
148
-
}
149
-
}
181
+
insecure_auth yes
182
+
}
150
183
151
-
destination postmaster $(local_domains) {
152
-
deliver_to &local_routing
153
-
}
154
-
155
-
default_destination {
156
-
modify {
157
-
dkim $(primary_domain) $(local_domains) default
158
-
}
159
-
160
-
deliver_to &remote_queue
161
-
}
162
-
}
184
+
imap tls://0.0.0.0:993 tcp://0.0.0.0:143 {
185
+
${imapConfig}
186
+
}
163
187
164
-
default_source {
165
-
reject 501 5.1.8 "Non-local sender domain"
166
-
}
167
-
}
188
+
imap tcp://127.0.0.1:113 {
189
+
${imapConfig}
168
190
169
-
imap tls://0.0.0.0:993 tcp://0.0.0.0:143 {
170
-
auth &local_authdb
171
-
storage &local_mailboxes
191
+
insecure_auth yes
172
192
}
173
193
174
194
target.remote outbound_delivery {