Fritz Otlinghaus
8de8e40d64
nixos/postfix: add types ( #111426 )
2021-01-31 13:52:46 +01:00
Alyssa Ross
011d073393
nixos/postfix: deprecate services.postfix.useDane
...
Now that smtp_tls_security_level is using mkDefault, and therefore can
be overridden, there's no need for an option for overriding it to a
specific value.
2021-01-14 10:24:31 +00:00
Alyssa Ross
9ed5ee909b
nixos/postfix: allow custom smtp_tls_security_level
...
I run Postfix on my workstation as a smarthost, where it only ever
talks to my SMTP server. Because I know it'll only ever connect to
this server, and because I know this server supports TLS, I'd like to
set smtp_tls_security_level to "encrypt" so Postfix won't fall back to
an unencrypted connection.
2021-01-14 10:24:31 +00:00
Marc 'risson' Schmitt
27dacb8b4b
nixos/postfix: fix masterCf type
...
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
2020-12-10 18:49:05 +01:00
Viktor Kleen
6216c843ed
nixos/postfix: make postfix.enableSmtp work again
...
This fixes issue #104715 .
2020-11-23 23:46:06 +00:00
Matt McHenry
a45f1453eb
postfix: add useDane config option
2020-08-12 21:18:36 -04:00
lewo
9534da25bf
Merge pull request #90115 from asbachb/postfix-tls
...
postfix: Replaced config key by recommendation and introduced usage of system trust store
2020-07-09 20:29:49 +02:00
Eric Wolf
8af58eda12
postfix: Add submissions option for postfix and test ( #91691 )
...
RFC 8314 suggests, for end user submission of
mails, SMTP over TLS on port 465 should be used.
Closes #91690
2020-07-06 03:37:56 +02:00
Benjamin Asbach
632104e5a4
postfix: deprecated sslCACert
in favour of tlsTrustedAuthorities
...
`sslCACert` was used for trust store of client and server certificates. Since `smtpd_tls_ask_ccert` defaults to no the setup of `smtpd_tls_CApath` was removed.
>By default (see smtpd_tls_ask_ccert), client certificates are not requested, and smtpd_tls_CApath should remain empty.
see http://www.postfix.org/postconf.5.html#smtpd_tls_CAfile
2020-07-05 14:53:34 +02:00
Benjamin Asbach
9d697837f0
postfix: used recommended configuration key to enable tls
...
> With Postfix 2.3 and later use smtp_tls_security_level instead.
http://www.postfix.org/postconf.5.html#smtp_use_tls
2020-07-05 14:50:40 +02:00
Dominik Xaver Hörl
c10d82358f
treewide: add types to boolean / enable options or make use of mkEnableOption
2020-04-27 09:32:01 +02:00
Jan Tojnar
e85b34c484
tree-wide: fix more warning related to loaOf deprecation
2020-01-11 08:09:56 +01:00
Milan Pässler
2a31a6a412
tree-wide: fix errors and warning related to loaOf deprecation
2020-01-07 06:23:28 +01:00
rnhmjoj
1d61efb7f1
treewide: use attrs instead of list for types.loaOf options
2020-01-06 10:39:18 -05:00
Alyssa Ross
7813c249ef
nixos/postfix: add missing setgid wrapper
...
This is basically an alias for a special case of postqueue, which
already has a setgid wrapper. Would be silly to allow postqueue -p
but not mailq.
2019-11-13 15:31:32 +00:00
Vladimír Čunát
f21211ebfe
Merge branch 'master' into staging
2019-09-02 23:25:24 +02:00
Silvan Mosberger
478e7184f8
nixos/modules: Remove all usages of types.string
...
And replace them with a more appropriate type
Also fix up some minor module problems along the way
2019-08-31 18:19:00 +02:00
Peter Simons
eedf3dc6e2
nixos/mailman: decouple the mailman module from the postfix module
...
https://github.com/NixOS/nixpkgs/pull/67708#discussion_r319579987 suggested
that simply appending the necessary maps to the appropriate attributes in
services.postfix.config gets the job done; we don't special support in the
postfix module to accomplish that.
2019-08-30 18:44:47 +02:00
Peter Simons
c1c1ce7221
mailman: add NixOS module to install and deploy the mailing list server
2019-08-29 20:29:35 +02:00
volth
35d68ef143
treewide: remove redundant quotes
2019-08-26 21:40:19 +00:00
Silvan Mosberger
88bb9fa403
nixos/modules: Replace all nested types.either's with types.oneOf's
2019-08-08 23:35:52 +02:00
Peter Simons
59bacaca3d
nixos: add 'localRecipients' config option for Postfix
...
The new option services.postfix.localRecipients allows
configuring the postfix option 'local_recipient_maps'. When
set to a list of user names (or patterns), that map
effectively replaces the lookup in the system's user
database that's used by default to determine which local
users are valid.
This option is useful to explicitly set local users that are
allowed to receive e-mail from the outside world. For local
injection i.e. via the 'sendmail' command this option has no
effect.
2019-07-15 17:36:20 +02:00
Jörg Thalheim
91ddc9d27f
postfix: add setgid wrapper for postqueue/postdrop
...
Both postqueue[1] and postdrop[2] implement a subset of administration
task that are supposed to be run unprivileged users
and require the setgid bit to full-fill this task.
[1] http://www.postfix.org/postqueue.1.html
[2] http://www.postfix.org/postdrop.1.html
2018-10-15 13:14:41 +01:00
Florian Klink
fff5923686
nixos/modules: users.(extraUsers|extraGroup->users|group)
2018-06-30 03:02:58 +02:00
Bjørn Forsman
d84f18e288
nixos/postfix: document that *Alias options support comma separated values
...
For the longest time I thought there could be only one rootAlias.
2018-02-18 13:04:08 +01:00
Franz Pletz
cb7fe51ee6
nixos/postfix: separate list option elements with commas
2018-01-26 14:10:17 +01:00
WilliButz
9bd7798d9c
nixos/postfix: fix default postfix config
...
`services.postfix.config` is now correctly merged with the default attrset
specified in the module. Some options that are lists in postfix also
have to be lists in nix to be merged correctly. Other default options are
now set with `mkDefault` so they can be overridden via the module system.
2018-01-24 23:35:28 +01:00
Sarah Brofeldt
2ddcdcce26
nixos/postfix: support alternate smtp ports when relaying ( #30685 )
...
* postfix: support alternate smtp ports when relaying
* fix missing ; after merge
2017-11-01 19:06:27 +01:00
Drew Hess
ad933bb096
postfix: add relayPort option. ( #30520 )
2017-10-25 19:11:55 +02:00
Ryan Hendrickson
c522aaafde
nixos/postfix: allow dollar parameters in lists ( #30612 )
2017-10-23 17:57:20 +02:00
Joachim F
cb3d443787
Merge pull request #29452 from jerith666/pfix-srsd-1709
...
nixos/pfix-srsd: add module
2017-10-03 00:51:59 +00:00
Matt McHenry
0ece5fc509
nixos/pfix-srsd: add module
2017-09-21 21:44:55 -04:00
Bjørn Forsman
eed14baec3
nixos/postfix: undo deprecation of extraConfig, extraMasterConf
...
I realize that advanced users like to configure services with Nix
attrsets, but I don't think we should remove the option to use the
(configuration) language provided by upstream.
2017-09-07 21:41:29 +02:00
Peter Simons
1b30d15369
Merge pull request #28123 from jerith666/post-fix-up
...
Post fix up
2017-08-11 09:36:58 +02:00
Matt McHenry
9186dda4a9
postfix: wakeup value should be used even if wakeupUnusedComponent is not defined
2017-08-10 21:32:03 -04:00
Matt McHenry
01fbf30041
postfix: warn about deprecated extraMasterConf option
2017-08-10 21:32:03 -04:00
Matt McHenry
edd4a0efe3
postfix: fix typo in transport_maps path
2017-08-10 21:32:02 -04:00
Taeradan
67890f73af
postfix service: typo in transport filepath
2017-07-31 21:05:03 +02:00
sshisk
e79d11b623
postfix service: fix extraMasterConf ( #27755 )
...
thanks
2017-07-30 11:37:51 +02:00
Joachim Schiele
af7c7b42c1
postfix: complete remake of postfix service ( #27276 )
2017-07-14 16:55:53 +02:00
Nikolay Amiantov
52c7e647ab
postfix service: don't empty local_recipient_maps
...
From Postfix documentation:
With this setting, the Postfix SMTP server will not reject mail with "User
unknown in local recipient table". Don't do this on systems that receive mail
directly from the Internet. With today's worms and viruses, Postfix will become
a backscatter source: it accepts mail for non-existent recipients and then
tries to return that mail as "undeliverable" to the often forged sender
address.
2017-02-06 01:41:27 +03:00
uwap
1e72706d66
Change default to postfix default.
2016-06-10 15:10:28 +02:00
uwap
ab0547b16f
Choose a better default for services.postfix.submissionOptions
2016-06-10 14:51:43 +02:00
uwap
cc658b695a
Make submission options more flexible
2016-06-09 18:06:07 +02:00
uwap
d1e4ee146d
Postfix: Add an option to enable Submission
...
Adds services.postfix.enableSubmission and services.postfix.extraSubmissionOptions to make it easy to enable submission in master.cf
2016-06-09 00:15:55 +02:00
Peter Simons
24fe7bab08
Drop support for postfix 2.x from Nixpkgs and NixOS.
...
Version 3.x has been stable for a long time; let's give up support for
the obsolete versions.
2016-03-11 16:01:43 +01:00
Peter Simons
ce6a1a6cea
Revert "Drop support for postfix 2.x from Nixpkgs and NixOS."
...
This reverts commit a889c683dd
. Sorry, I
pushed to the wrong branch. :-(
2016-03-11 16:00:49 +01:00
Peter Simons
a889c683dd
Drop support for postfix 2.x from Nixpkgs and NixOS.
...
Version 3.x has been stable for a long time; let's give up support for
the obsolete versions.
2016-03-11 15:58:03 +01:00
Peter Simons
7bd6fc90cb
Merge pull request #12725 from jerith666/postfix-dns-bl
...
postfix service: implement DNS blacklist support
2016-02-12 12:43:27 +01:00
Matt McHenry
40c7d554d4
postfix service: implement DNS blacklist support
2016-02-11 22:13:09 -05:00