forgejo prod: email verification, ssh keys

This commit is contained in:
bogale 2026-09-27 20:44:15 +09:00
commit b970685e0e
2 changed files with 41 additions and 26 deletions

View file

@ -23,13 +23,18 @@ in {
enable = true;
enableSubmissions = true;
virtualMapType = "regexp";
virtual = "/.*@bogaledev.ru/ mail@bogaledev.ru";
mapFiles.smtp_passwd = "/secrets/smtp_passwd";
virtual = "/.*@bogaledev.ru/ mail@bogaledev.ru";
submissionsOptions = {
smtpd_tls_wrappermode = true;
smtpd_sasl_auth_enable = "yes";
milter_macro_daemon_name = "ORIGINATING";
smtpd_client_restrictions = "permit_sasl_authenticated,reject";
};
settings.main = {
smtpd_sasl_type = "dovecot";
smtp_tls_wrappermode = true;
smtp_sasl_auth_enable = true;
smtpd_tls_wrappermode = true;
smtpd_sasl_auth_enable = true;
smtp_tls_security_level = "verify";
relayhost = [ "smtp.resend.com:2465" ];
@ -38,10 +43,7 @@ in {
smtp_sasl_tls_security_options = "noanonymous";
smtp_sasl_password_maps = "hash:/etc/postfix/smtp_passwd";
virtual_transport = "lmtp:unix:${postfixDir}/dovecot-lmtp";
smtpd_tls_chain_files = [
"${sslCertDir}/key.pem"
"${sslCertDir}/fullchain.pem"
];
smtpd_tls_chain_files = [ "${sslCertDir}/key.pem" "${sslCertDir}/fullchain.pem" ];
};
};
dovecot2 = {
@ -73,10 +75,10 @@ in {
inbox = true;
"mailbox Sent" = {
auto = "subscribe";
mailbox_special_use = "Sent";
mailbox_special_use = "\\Sent";
};
"mailbox Archive" = {
auto = "create";
auto = "subscribe";
mailbox_special_use = "\\Archive";
};
"mailbox Important" = {
@ -84,12 +86,12 @@ in {
mailbox_special_use = "\\Flagged";
};
"mailbox Spam" = {
auto = "create";
auto = "subscribe";
mailbox_autoexpunge = "45d";
mailbox_special_use = "\\Junk";
};
"mailbox Trash" = {
auto = "create";
auto = "subscribe";
mailbox_autoexpunge = "45d";
mailbox_special_use = "\\Trash";
};