31 lines
992 B
Nix
31 lines
992 B
Nix
|
{ config, ... }: {
|
||
|
|
services.rspamd = {
|
||
|
|
enable = true;
|
||
|
|
locals."dkim_signing.conf".text = ''
|
||
|
|
domain {
|
||
|
|
darkkirb.de {
|
||
|
|
selector = "dkim";
|
||
|
|
path = "${config.sops.secrets."services/rspamd/dkim/darkkirb.de".path}";
|
||
|
|
}
|
||
|
|
miifox.net {
|
||
|
|
selector = "dkim";
|
||
|
|
path = "${config.sops.secrets."services/rspamd/dkim/miifox.net".path}";
|
||
|
|
}
|
||
|
|
chir.rs {
|
||
|
|
selector = "dkim";
|
||
|
|
path = "${config.sops.secrets."services/rspamd/dkim/chir.rs".path}";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
allow_hdrfrom_mismatch = true;
|
||
|
|
allow_hdrfrom_mismatch_sign_networks = true;
|
||
|
|
allow_username_mismatch = true;
|
||
|
|
use_domain = "header";
|
||
|
|
sign_authenticated = true;
|
||
|
|
use_esld = true;
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
sops.secrets."services/rspamd/dkim/darkkirb.de" = { owner = "rspamd"; };
|
||
|
|
sops.secrets."services/rspamd/dkim/miifox.net" = { owner = "rspamd"; };
|
||
|
|
sops.secrets."services/rspamd/dkim/chir.rs" = { owner = "rspamd"; };
|
||
|
|
}
|