postfix: increase privacy by removing the first received header if the mail was sent to the submission port by an authorized user
This commit is contained in:
parent
a2c0849d11
commit
8fb8cd65d5
10
postfix.nix
10
postfix.nix
|
@ -1,6 +1,9 @@
|
||||||
{ config, lib, pkgs, ... }:
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
let
|
let
|
||||||
|
submission_header_cleanup_regex = pkgs.writeText "submission_header_cleanup_regex" ''
|
||||||
|
/^Received:.*by ${config.variables.myFQDN} \(Postfix/ IGNORE
|
||||||
|
'';
|
||||||
pfvirtual_mailbox_domains = pkgs.writeText "virtual_mailbox_domains.cf" ''
|
pfvirtual_mailbox_domains = pkgs.writeText "virtual_mailbox_domains.cf" ''
|
||||||
dbpath = ${config.variables.pfadminDataDir}/postfixadmin.db
|
dbpath = ${config.variables.pfadminDataDir}/postfixadmin.db
|
||||||
query = SELECT domain FROM domain WHERE domain='%s' AND active = '1'
|
query = SELECT domain FROM domain WHERE domain='%s' AND active = '1'
|
||||||
|
@ -75,6 +78,13 @@ in
|
||||||
virtual_mailbox_maps = "proxy:sqlite:${pfvirtual_mailbox_maps}, proxy:sqlite:${pfvirtual_alias_domain_mailbox_maps}";
|
virtual_mailbox_maps = "proxy:sqlite:${pfvirtual_mailbox_maps}, proxy:sqlite:${pfvirtual_alias_domain_mailbox_maps}";
|
||||||
virtual_transport = "lmtp:unix:${config.variables.dovecotLmtpSocket}";
|
virtual_transport = "lmtp:unix:${config.variables.dovecotLmtpSocket}";
|
||||||
};
|
};
|
||||||
|
masterConfig.submission.args = [ "-o" "cleanup_service_name=submission_cleanup" ];
|
||||||
|
masterConfig."submission_cleanup" = {
|
||||||
|
command = "cleanup";
|
||||||
|
args = [ "-o" "header_checks=regexp:${submission_header_cleanup_regex}" ];
|
||||||
|
private = false;
|
||||||
|
maxproc = 0;
|
||||||
|
};
|
||||||
rootAlias = config.variables.mailAdmin;
|
rootAlias = config.variables.mailAdmin;
|
||||||
postmasterAlias = config.variables.mailAdmin;
|
postmasterAlias = config.variables.mailAdmin;
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue