Add 465 port for mail submission

diff --git a/modules/private/mail/postfix.nix b/modules/private/mail/postfix.nix
index dfe6129af9ef847db361a819a69ec8b96f833388..ee4ac35159e09da2b057f168fc9a862514d97e88 100644 (file)
--- a/modules/private/mail/postfix.nix
+++ b/modules/private/mail/postfix.nix
@@ -77,7 +77,7 @@
     }
   ];
 
-  config.networking.firewall.allowedTCPPorts = [ 25 587 ];
+  config.networking.firewall.allowedTCPPorts = [ 25 465 587 ];
 
   config.nixpkgs.overlays = [ (self: super: {
     postfix = super.postfix.override { withMySQL = true; };
@@ -205,6 +205,15 @@
     sslKey = "/var/lib/acme/mail/key.pem";
     recipientDelimiter = "+";
     masterConfig = {
+      submissions = {
+        type = "inet";
+        private = false;
+        command = "smtpd";
+        args = ["-o" "smtpd_tls_wrappermode=yes" ] ++ (let
+          mkKeyVal = opt: val: [ "-o" (opt + "=" + val) ];
+        in lib.concatLists (lib.mapAttrsToList mkKeyVal config.services.postfix.submissionOptions)
+        );
+      };
       dovecot = {
         type = "unix";
         privileged = true;

diff --git a/modules/private/websites/tools/mail/www/index.html b/modules/private/websites/tools/mail/www/index.html
index 3727c42c17cefb8410846c6bace58b0bddb708cc..88b0ebdab10bda4d40470cb44da26326a62840af 100644 (file)
--- a/modules/private/websites/tools/mail/www/index.html
+++ b/modules/private/websites/tools/mail/www/index.html
@@ -37,14 +37,14 @@
         <li>IMAP: <span class="code">imap.immae.eu</span>
           <ul>
             <li>No unencrypted access</li>
-            <li>STARTTLS: 143 (recommended)</li>
+            <li>STARTTLS: 143</li>
             <li>SSL: 993</li>
           </ul>
         </li>
         <li>POP3: <span class="code">pop3.immae.eu</span>
           <ul>
             <li>No unencrypted access</li>
-            <li>STARTTLS: 110 (recommended)</li>
+            <li>STARTTLS: 110</li>
             <li>SSL: 995</li>
           </ul>
         </li>
@@ -52,6 +52,7 @@
           <ul>
             <li>No unencrypted access</li>
             <li>STARTTLS: 587</li>
+            <li>SSL: 465</li>
           </ul>
         </li>
         <li>Sieve: <span class="code">imap.immae.eu</span>