From b2b16fcbe3f68ef46ebbcffc0f267b586ab6ca7b Mon Sep 17 00:00:00 2001 From: Lander Van den Bulcke Date: Tue, 21 Oct 2025 11:33:15 +0200 Subject: [PATCH] fix: only deliver escapeangle mail locally Signed-off-by: Lander Van den Bulcke --- hosts/hosting-01/secrets.yaml | 6 +++--- hosts/servers/mail-01.nix | 17 ++++++++++++++--- 2 files changed, 17 insertions(+), 6 deletions(-) diff --git a/hosts/hosting-01/secrets.yaml b/hosts/hosting-01/secrets.yaml index ce532f7..d65e468 100644 --- a/hosts/hosting-01/secrets.yaml +++ b/hosts/hosting-01/secrets.yaml @@ -20,7 +20,7 @@ forgejo: mailer-password: ENC[AES256_GCM,data:sO8Tt1Smwcr8hME/zYs118DiUfbcmhKnT2FCyjyUZfId4cHfjvxHuqZIHvBSlec27sbCmxRBHeCJ3Can6IFCAA==,iv:kPmW6oFCRBEzKScpFrW3Z0xhFCRg+MpiA9qJozakHjE=,tag:9xCVN/wFjN8Kl95PSC9aXA==,type:str] oidc-secret: ENC[AES256_GCM,data:NeLfEXssdP5f4ff1uz3RwURw+OWAm3QgYz/EPpWb1aE+vIDIhPigiPem1+NrVvdBQ5uysL3VdnLtJPxwppcouoT7VGJkcog+,iv:eCl4I7EC7GTeQNSthk5QrMqNl1B9qvGGxQTspjD+LEU=,tag:qyPKf7E5xNmUI913Fb8n8A==,type:str] mealie-env: ENC[AES256_GCM,data:3fZJffJs/WwtmMirHBRkghfPPkTB5sgY6oWNs5GUbkUzOooWurOvm0OcQHAEQf+HLn21kCOk/ilmlrcdMFtzXijClpHuy8n7cwmdGI0bwZ14QPCVlSYvSPisjX0=,iv:tc77J3T4tNGzBnXNBlq4wmfFMFQ44ZFEtl2N1QAt77U=,tag:hW7YceS5/GQveJj8fcf5uA==,type:str] -vaultwarden: ENC[AES256_GCM,data:+QzOPUHGkFsOxa8o86zUNNay1yYJ2r0o7jCwu66SY0+rKdEn9yCnxvvE7ae+L6oubYMAWnu8p9hiQxq6kqy9EqCugKfY6Ygeu8Tl074GcpMSPm7fUfd326ZflJElsDHpyB4IrHdi+clHWANWcOvs3r0nNGsl6s6DAq3wOjK+keQkIY+1eWCxQlQWNsMg6b0kIM47aztMik3wwRNRirk/VupWUNCMkFqgQBL5QEsrXzeUiDwTQrRjIEUNedA7m+Vk96fFOS64YCKCgOIhO1Lsb0eVRj5dB3oY2FKqkeKxtHhKmUIPJnE9jykZexpj+45oyiWv1jvF+VgO3XAGkOZZ59EPoJi42xt9z9xgQIroCAww7sOYwTcnfBaaaB4fw13zEn4EbfJoktbRLygVfmuogYw9Zi/RBPUXjBiaowt97OIcJBwsDqN926+N3TOu1KXfJCZ1+iiX,iv:DCF1sMCyrN3ZsJOm7PwNW1lN4Q5NdvTqT4T4pUo9My8=,tag:cFuJaFhulI2P2WLJ7/6A8g==,type:str] +vaultwarden: ENC[AES256_GCM,data:6yLk6ip/Bd/469XNDYq5kKl+fPy8/+9Ybhruyly0HopNXbrBmzfAkAhuP0geZZTeAkxp2k/nn8vQ9I10QwzQ5Si0RhQWWidUdd2VyAlDlppiGBhtpeiY3J/2tlEGH1rf1O0NL23oGtqvRe4mEMZtyqK6YPYv7skOjaV5mzxu97psTQlqnOOAaisIVN/LqmKmzR72T3/SxlN8I0JzMneICfSLcwEp2//qVplqvTwTQgWziMf/Gkf2kkbugKRWSbp7sQ6cel2Gk2zyREx86biTje6nOjZ5goT2dcXzGexp6bzFb+XKu1Zj5wfY7dmvxZzMyigm4SSkjLd0Fh0QxU9cEiMAe5Max8c0i4Nqfh3Y1JZFj5sMS7e34oERMSA5wNu0l9hTaM5AYWiNPpvi4T3kLlguX5oerWvZWzeQT53soZF2iKdah2+J/0Wck8FRU3JXhC56XfIb,iv:AFzQvZnD8Aswoshp6X3AFkdxRCvL7rbClMwoW9C8epA=,tag:+W4t7W59LQMc3JzwoaAAcA==,type:str] sops: age: - recipient: age18g4z53ykxzq35dsjq3a2np4f88xwat0kwtax229l3zn0ykhlpvqqy8fgtv @@ -32,8 +32,8 @@ sops: NW9CUkJQbis1NmpyU0xrb3J4UVNKTDgKsPFnlQBa8LGm6s8uZsUXq9RIt4WzzROc mz9dEVq/R54xvjMRltgzZyu54BWWOQYgkZUEhOnDoqwVnA7XwGGYtA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-10-21T09:21:50Z" - mac: ENC[AES256_GCM,data:3abE7upli5bZLgCytALgyMstS9FXE3v7ywv/O65OIKgbh9ACiHvR0nun8yi28eOfK5ISclJ+e1UwhPFRaElSAmdZAaZcFXBeIMuBHtHVy/VCbrq0Du9pbyxKsjJAnUZ0h0sv8hbt5SevYwAvffYNasdOWNxgBZCxQlipUI83L1g=,iv:/vmyPrlpe2J2Qs80r9NKqE4BnvJl+iqFGgOAkzvToeg=,tag:GOLLTYslpvIkWyTm8uJb6g==,type:str] + lastmodified: "2025-10-21T09:26:44Z" + mac: ENC[AES256_GCM,data:yiWDzGJj/Yuq/Y8DvE+muEGiynr8TI0RkX2YAu3KdloSvtAvjBRbc3kkyFqEAjLA9EKJAhb+0O00Ugul5uo0icw8PMBOBg2lMgLGcW7w531O1DgSgoVloUNRp+YlAnFQMkBO/euRwWOgfHmp3Usj4NmnUStTXuZUH225EeSBYkE=,iv:dPnfHLkgpp/AyuAAY4r13toPlMa5myzo3ubNDDN8Ya0=,tag:FaA31H6Rd8RUJvixsIo9BQ==,type:str] pgp: - created_at: "2025-07-06T18:28:35Z" enc: |- diff --git a/hosts/servers/mail-01.nix b/hosts/servers/mail-01.nix index 96e1c9a..2aa5eb9 100644 --- a/hosts/servers/mail-01.nix +++ b/hosts/servers/mail-01.nix @@ -1,4 +1,4 @@ -{ inputs, config, ... }: +{ config, lib, ... }: let floatingIPv4 = "78.47.245.200"; in @@ -61,8 +61,19 @@ in virusScanning = true; }; - services.postfix.config = { - "smtp_bind_address" = floatingIPv4; + services.postfix = { + config = { + smtp_bind_address = floatingIPv4; + + mydestination = lib.mkForce [ + "localhost" + "escapeangle.com" + ]; + + virtual_mailbox_domains = lib.mkForce (builtins.toFile "vhosts" "escapeangle.com"); + }; + + localRecipients = [ "@escapeangle.com" ]; }; sops = {