nixos/postfix: allow custom smtp_tls_security_level

I run Postfix on my workstation as a smarthost, where it only ever
talks to my SMTP server.  Because I know it'll only ever connect to
this server, and because I know this server supports TLS, I'd like to
set smtp_tls_security_level to "encrypt" so Postfix won't fall back to
an unencrypted connection.
This commit is contained in:
Alyssa Ross 2021-01-12 15:50:51 +00:00
parent 50fb327d7a
commit 9ed5ee909b

View file

@ -25,7 +25,7 @@ let
clientRestrictions = concatStringsSep ", " (clientAccess ++ dnsBl);
smtpTlsSecurityLevel = if cfg.useDane then "dane" else "may";
smtpTlsSecurityLevel = if cfg.useDane then "dane" else mkDefault "may";
mainCf = let
escape = replaceStrings ["$"] ["$$"];