2016-04-12 13:16:40 +00:00
|
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
|
2016-10-20 18:54:38 +00:00
|
|
|
with import <stockholm/lib>;
|
2016-04-12 13:16:40 +00:00
|
|
|
|
|
|
|
{
|
|
|
|
krebs.exim-smarthost = {
|
|
|
|
enable = true;
|
2016-04-12 14:32:58 +00:00
|
|
|
dkim = [
|
|
|
|
{ domain = "lassul.us"; }
|
|
|
|
];
|
2017-03-04 19:03:19 +00:00
|
|
|
primary_hostname = "lassul.us";
|
2016-04-12 13:16:40 +00:00
|
|
|
sender_domains = [
|
|
|
|
"lassul.us"
|
2016-04-19 10:06:50 +00:00
|
|
|
"aidsballs.de"
|
2016-04-12 13:16:40 +00:00
|
|
|
];
|
2017-02-18 19:39:34 +00:00
|
|
|
relay_from_hosts = map (host: host.nets.retiolum.ip6.addr) [
|
2016-04-12 13:16:40 +00:00
|
|
|
config.krebs.hosts.mors
|
|
|
|
config.krebs.hosts.uriel
|
|
|
|
];
|
|
|
|
internet-aliases = with config.krebs.users; [
|
|
|
|
{ from = "postmaster@lassul.us"; to = lass.mail; } # RFC 822
|
|
|
|
{ from = "lass@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "lassulus@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "test@lassul.us"; to = lass.mail; }
|
2016-04-13 14:29:52 +00:00
|
|
|
{ from = "outlook@lassul.us"; to = lass.mail; }
|
2016-04-19 10:06:50 +00:00
|
|
|
{ from = "steuer@aidsballs.de"; to = lass.mail; }
|
|
|
|
{ from = "lass@aidsballs.de"; to = lass.mail; }
|
2016-05-12 22:20:26 +00:00
|
|
|
{ from = "wordpress@ubikmedia.de"; to = lass.mail; }
|
2016-05-31 22:11:54 +00:00
|
|
|
{ from = "finanzamt@lassul.us"; to = lass.mail; }
|
2016-06-08 16:22:35 +00:00
|
|
|
{ from = "netzclub@lassul.us"; to = lass.mail; }
|
2016-06-16 20:11:19 +00:00
|
|
|
{ from = "nebenan@lassul.us"; to = lass.mail; }
|
2016-10-19 13:05:19 +00:00
|
|
|
{ from = "feed@lassul.us"; to = lass.mail; }
|
2016-10-19 13:05:33 +00:00
|
|
|
{ from = "art@lassul.us"; to = lass.mail; }
|
2016-12-08 20:45:36 +00:00
|
|
|
{ from = "irgendwas@lassul.us"; to = lass.mail; }
|
2017-06-30 11:11:17 +00:00
|
|
|
{ from = "polo@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "shack@lassul.us"; to = lass.mail; }
|
2017-07-25 22:29:32 +00:00
|
|
|
{ from = "nix@lassul.us"; to = lass.mail; }
|
2017-07-28 16:21:10 +00:00
|
|
|
{ from = "c-base@lassul.us"; to = lass.mail; }
|
2017-07-28 22:32:28 +00:00
|
|
|
{ from = "paypal@lassul.us"; to = lass.mail; }
|
2017-07-31 11:47:39 +00:00
|
|
|
{ from = "patreon@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "steam@lassul.us"; to = lass.mail; }
|
2017-08-06 14:13:58 +00:00
|
|
|
{ from = "securityfocus@lassul.us"; to = lass.mail; }
|
2017-08-14 21:37:40 +00:00
|
|
|
{ from = "radio@lassul.us"; to = lass.mail; }
|
2017-09-03 08:38:36 +00:00
|
|
|
{ from = "btce@lassul.us"; to = lass.mail; }
|
2017-09-19 18:15:36 +00:00
|
|
|
{ from = "raf@lassul.us"; to = lass.mail; }
|
2017-09-30 17:11:08 +00:00
|
|
|
{ from = "apple@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "coinbase@lassul.us"; to = lass.mail; }
|
2017-10-26 17:13:30 +00:00
|
|
|
{ from = "tomtop@lassul.us"; to = lass.mail; }
|
2017-11-12 12:16:52 +00:00
|
|
|
{ from = "aliexpress@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "business@lassul.us"; to = lass.mail; }
|
2017-12-13 17:29:15 +00:00
|
|
|
{ from = "payeer@lassul.us"; to = lass.mail; }
|
2017-12-31 01:47:21 +00:00
|
|
|
{ from = "github@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "bitwala@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "bitstamp@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "bitcoin.de@lassul.us"; to = lass.mail; }
|
|
|
|
{ from = "ableton@lassul.us"; to = lass.mail; }
|
2016-04-12 13:16:40 +00:00
|
|
|
];
|
|
|
|
system-aliases = [
|
|
|
|
{ from = "mailer-daemon"; to = "postmaster"; }
|
|
|
|
{ from = "postmaster"; to = "root"; }
|
|
|
|
{ from = "nobody"; to = "root"; }
|
|
|
|
{ from = "hostmaster"; to = "root"; }
|
|
|
|
{ from = "usenet"; to = "root"; }
|
|
|
|
{ from = "news"; to = "root"; }
|
|
|
|
{ from = "webmaster"; to = "root"; }
|
|
|
|
{ from = "www"; to = "root"; }
|
|
|
|
{ from = "ftp"; to = "root"; }
|
|
|
|
{ from = "abuse"; to = "root"; }
|
|
|
|
{ from = "noc"; to = "root"; }
|
|
|
|
{ from = "security"; to = "root"; }
|
|
|
|
{ from = "root"; to = "lass"; }
|
|
|
|
];
|
|
|
|
};
|
|
|
|
krebs.iptables.tables.filter.INPUT.rules = [
|
|
|
|
{ predicate = "-p tcp --dport smtp"; target = "ACCEPT"; }
|
|
|
|
];
|
|
|
|
}
|