summaryrefslogtreecommitdiff
path: root/systems/izumi/system-files
diff options
context:
space:
mode:
Diffstat (limited to 'systems/izumi/system-files')
-rw-r--r--systems/izumi/system-files/smtpd.conf24
-rw-r--r--systems/izumi/system-files/sudoers3
2 files changed, 27 insertions, 0 deletions
diff --git a/systems/izumi/system-files/smtpd.conf b/systems/izumi/system-files/smtpd.conf
new file mode 100644
index 0000000..9fe7503
--- /dev/null
+++ b/systems/izumi/system-files/smtpd.conf
@@ -0,0 +1,24 @@
+# The prefix on GUIX is not the default one — it is /etc .
+table aliases file:/etc/aliases
+
+# The mail certificates are issued by Let‘s Encrypt and served by NGINX
+pki marekpasnikowski.pl cert "/etc/letsencrypt/live/marekpasnikowski.pl/fullchain.pem"
+pki marekpasnikowski.pl key "/etc/letsencrypt/live/marekpasnikowski.pl/privkey.pem"
+
+# Listen for local messages.
+listen on lo
+
+# Listen for messages from the internet.
+listen on enp1s0 tls port 25 pki "marekpasnikowski.pl"
+listen on enp1s0 smtps port 465 pki "marekpasnikowski.pl"
+
+# There is no filtering in the design, so the two actions are enough.
+action receive maildir alias <aliases>
+action send relay
+
+# Match incoming messages.
+match from local for local action receive
+match from any for domain "marekpasnikowski.pl" action receive
+
+# Match outgoing messages.
+match for any action send
diff --git a/systems/izumi/system-files/sudoers b/systems/izumi/system-files/sudoers
new file mode 100644
index 0000000..6af6e3b
--- /dev/null
+++ b/systems/izumi/system-files/sudoers
@@ -0,0 +1,3 @@
+root ALL=(ALL) ALL
+%wheel ALL=(ALL) ALL
+Defaults passwd_timeout=0