mail: force explicit TLS on SMTP too

also switch away from legacy ports

services/gitlab.nix

@@ -53,7 +53,7 @@
         smtp = {
           enable = true;
           address = "mail.hacc.space";
-          port = 587;
+          port = 465;
           authentication = "plain";
           domain = "gitlab.infra4future.de";
           enableStartTLSAuto = true;

services/mail.nix

@@ -132,6 +132,7 @@
     # Only allow implict TLS
     enableImap = false;
     enablePop3 = false;
+    enableSubmission = false;
 
     # Enable the ManageSieve protocol
     enableManageSieve = true;

services/vaultwarden.nix

@@ -23,7 +23,7 @@
       SMTP_HOST="mail.hacc.space";
       SMTP_FROM="vaultwarden@hacc.space";
       SMTP_FROM_NAME="haccwarden";
-      SMTP_PORT=587;
+      SMTP_PORT=465;
       SMTP_USERNAME="noreply@infra4future.de";
 
     };