rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-17 02:12:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add dkim to stalwart

Browse Source
This commit is contained in:
Ruben Hensen
2026-03-22 16:06:40 +01:00
parent 7a98ad0a9e
commit 04fafd64e2
2 changed files with 38 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nix-infra-machine/nodes/node001.nix
+30
View File
@@ -136,6 +136,34 @@
};
};
signature."rsa" = {
private-key = "%{file:/run/credentials/stalwart-mail.service/dkim-rsa.key}%";
domain = "rubenhensen.nl";
selector = "202603r2";
headers = ["From" "To" "Cc" "Date" "Subject" "Message-ID" "Organization" "MIME-Version" "Content-Type" "In-Reply-To" "References" "List-Id"];
algorithm = "rsa-sha-256";
canonicalization = "relaxed/relaxed";
expire = "10d";
set-body-length = false;
report = true;
};
signature."ed25519" = {
private-key = "%{file:/run/credentials/stalwart-mail.service/dkim-ed25519.key}%";
domain = "rubenhensen.nl";
selector = "202603e2";
headers = ["From" "To" "Cc" "Date" "Subject" "Message-ID" "Organization" "MIME-Version" "Content-Type" "In-Reply-To" "References" "List-Id"];
algorithm = "ed25519-sha256";
canonicalization = "relaxed/relaxed";
set-body-length = false;
report = false;
};
auth.dkim.sign = [
{ "if" = "listener != 'smtp'"; "then" = "['rsa', 'ed25519']"; }
{ "else" = false; }
];
authentication.fallback-admin = {
user = "admin";
secret = "%{file:/run/credentials/stalwart-mail.service/stalwart-admin-password}%";
@@ -146,6 +174,8 @@
systemd.services.stalwart-mail.serviceConfig.LoadCredentialEncrypted = [
"stalwart-admin-password:/root/secrets/[%%secrets/stalwart-admin-password%%]"
"ldap_bind_password:/root/secrets/[%%secrets/ldap_bind_password%%]"
"dkim-rsa.key:/root/secrets/[%%secrets/dkim-rsa.key%%]"
"dkim-ed25519.key:/root/secrets/[%%secrets/dkim-ed25519.key%%]"
];
users.users.stalwart-mail.extraGroups = [ "acme" ];