Stalwart: Difference between revisions
Auto update TLSA records: add https://codeberg.org/Cameo007/dyndns-tlsa-desec for deSEC.io |
Use stalwart-mail.credentials for secrets handling |
||
| (One intermediate revision by the same user not shown) | |||
| Line 14: | Line 14: | ||
enable = true; | enable = true; | ||
openFirewall = true; | openFirewall = true; | ||
credentials = { | |||
mail-pw1 = /etc/stalwart/mail-pw1; | |||
mail-pw2 = /etc/stalwart/mail-pw2; | |||
acme-secret = /etc/stalwart/acme-secret; | |||
}; | |||
settings = { | settings = { | ||
server = { | server = { | ||
| Line 57: | Line 62: | ||
domains = [ "example.org" "mx1.example.org" ]; | domains = [ "example.org" "mx1.example.org" ]; | ||
provider = "cloudflare"; | provider = "cloudflare"; | ||
secret = "%{file:/ | secret = "%{file:/run/credentials/stalwart-mail.service/acme-secret}%"; | ||
}; | }; | ||
session.auth = { | session.auth = { | ||
| Line 72: | Line 77: | ||
class = "individual"; | class = "individual"; | ||
name = "User 1"; | name = "User 1"; | ||
secret = "%{file:/ | secret = "%{file:/run/credentials/stalwart-mail.service/mail-pw1}%"; | ||
email = [ "user1@example.org" ]; | email = [ "user1@example.org" ]; | ||
} | } | ||
| Line 78: | Line 83: | ||
class = "individual"; | class = "individual"; | ||
name = "postmaster"; | name = "postmaster"; | ||
secret = "%{file:/ | secret = "%{file:/run/credentials/stalwart-mail.service/mail-pw1}%"; | ||
email = [ "postmaster@example.org" ]; | email = [ "postmaster@example.org" ]; | ||
} | } | ||
| Line 85: | Line 90: | ||
authentication.fallback-admin = { | authentication.fallback-admin = { | ||
user = "admin"; | user = "admin"; | ||
secret = "%{file:/ | secret = "%{file:/run/credentials/stalwart-mail.service/admin-pw}%"; | ||
}; | }; | ||
}; | }; | ||
| Line 256: | Line 261: | ||
class = "individual"; | class = "individual"; | ||
name = "User 1"; | name = "User 1"; | ||
secret = "%{file:/ | secret = "%{file:/run/credentials/stalwart-mail.service/mail-pw1}%"; | ||
email = [ "user1@example.org" "user1real@example.org ]; | email = [ "user1@example.org" "user1real@example.org ]; | ||
} | } | ||
| Line 263: | Line 268: | ||
}; | }; | ||
};}} | };}} | ||
=== Blocking mail sender address === | |||
If you don't want to receive any mails from a specific address, even not into your spam folder, you can add it to the spam-trap array.{{file|||3=services.stalwart-mail = { | |||
settings = { | |||
lookup = { | |||
spam-trap = { | |||
"malicious_sender1@spamhost.com" = ""; | |||
"malicious_sender2@spamhost.com" = ""; | |||
}; | |||
}; | |||
};|name=/etc/nixos/configuration.nix|lang=nix}} | |||
== Tips and tricks == | == Tips and tricks == | ||