mail: force explicit TLS on SMTP too

also switch away from legacy ports
2022-07-10 15:24:53 +02:00
3 changed files with 3 additions and 2 deletions
--- a/services/gitlab.nix
+++ b/services/gitlab.nix
@ -53,7 +53,7 @@
        smtp = {
          enable = true;
          address = "mail.hacc.space";
-          port = 587;
+          port = 465;
          authentication = "plain";
          domain = "gitlab.infra4future.de";
          enableStartTLSAuto = true;
--- a/services/mail.nix
+++ b/services/mail.nix
@ -132,6 +132,7 @@
    # Only allow implict TLS
    enableImap = false;
    enablePop3 = false;
+    enableSubmission = false;

    # Enable the ManageSieve protocol
    enableManageSieve = true;
--- a/services/vaultwarden.nix
+++ b/services/vaultwarden.nix
@ -23,7 +23,7 @@
      SMTP_HOST="mail.hacc.space";
      SMTP_FROM="vaultwarden@hacc.space";
      SMTP_FROM_NAME="haccwarden";
-      SMTP_PORT=587;
+      SMTP_PORT=465;
      SMTP_USERNAME="noreply@infra4future.de";

    };