From dfec18e90402a76887fc6e1917720c9979a7795f Mon Sep 17 00:00:00 2001
From: Zuckerberg <zuckerberg@neet.dev>
Date: Tue, 3 May 2022 18:33:48 -0400
Subject: [PATCH] Send mail through mailgun

---
 machines/liza/configuration.nix |  26 +++++++++++++++++++++++++-
 secrets/sasl_relay_passwd.age   | Bin 0 -> 2716 bytes
 secrets/secrets.nix             |   1 +
 3 files changed, 26 insertions(+), 1 deletion(-)
 create mode 100644 secrets/sasl_relay_passwd.age

diff --git a/machines/liza/configuration.nix b/machines/liza/configuration.nix
index d0462ec..4abb629 100644
--- a/machines/liza/configuration.nix
+++ b/machines/liza/configuration.nix
@@ -38,7 +38,6 @@
       "runyan.org" "runyan.rocks"
       "thunderhex.com" "tar.ninja"
       "bsd.ninja" "bsd.rocks"
-      "paradigminteractive.agency"
     ];
     loginAccounts = {
       "jeremy@runyan.org" = {
@@ -61,6 +60,31 @@
   };
   age.secrets.email-pw.file = ../../secrets/email-pw.age;
 
+  # relay sent mail through mailgun
+  # https://www.howtoforge.com/community/threads/different-smtp-relays-for-different-domains-in-postfix.82711/#post-392620
+  services.postfix.config = {
+    smtp_sasl_auth_enable = "yes";
+    smtp_sasl_security_options = "noanonymous";
+    smtp_sasl_password_maps = "hash:/var/lib/postfix/conf/sasl_relay_passwd";
+    smtp_use_tls = "yes";
+    sender_dependent_relayhost_maps = "hash:/var/lib/postfix/conf/sender_relay";
+  };
+  services.postfix.mapFiles.sender_relay = let
+    relayHost = "[smtp.mailgun.org]:587";
+  in pkgs.writeText "sender_relay" ''
+    @neet.space ${relayHost}
+    @neet.cloud ${relayHost}
+    @neet.dev ${relayHost}
+    @runyan.org ${relayHost}
+    @runyan.rocks ${relayHost}
+    @thunderhex.com ${relayHost}
+    @tar.ninja ${relayHost}
+    @bsd.ninja ${relayHost}
+    @bsd.rocks ${relayHost}
+  '';
+  services.postfix.mapFiles.sasl_relay_passwd = "/run/agenix/sasl_relay_passwd";
+  age.secrets.sasl_relay_passwd.file = ../../secrets/sasl_relay_passwd.age;
+
   services.nextcloud = {
     enable = true;
     https = true;
diff --git a/secrets/sasl_relay_passwd.age b/secrets/sasl_relay_passwd.age
new file mode 100644
index 0000000000000000000000000000000000000000..60a281d4d578c92de01789521221f20049a3c6b8
GIT binary patch
literal 2716
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCTy$al;&FIOnb4#~}S
z@klk&H%K!pu5#B7O;1jBOY!wFD=u=(NcPGp$S?8r4Yu@f_T<V8%=9)3NzF;Gbo4iI
z^l>rE3^Fn;wJbD9N%1d_@W^(~C@pkOPxVMHwLrHmH>upB!cigIJvc1HEIB3EG|eSa
zJ3lfzxuU`_v>+_cJHR|M*}pI~ydbqOIMKr*H=oNhq$)VlAUG<iB*h>z*uXE#Af(VD
z-P5%yxy;8P&p0PF&&j~8ATKS*CluW_KO+-^kaPu?0&k~6kHCOpf9<@=B9kHu?@-Gm
z?bJMzY?EyLl5(#qcemm|3onmM<4CTg<P@K9r(lm%!>Vj2=fuF&P<_wLD${av{ferJ
z%21CgkK}U8Z1afhBu{kPj1r9^Gs+b#3=%5~%`CHXA|k>AT=Sg@^4&|)i=2zS${juR
z6SFLei$V;%yiC%o${o2PvJBG=EZtp0Q+-M^L$%!^L-RAMT(!%REOU&~Jl(Ymih@GI
ziX)9H(j(DrOYsei%uiP+PBZb=c6Cg0O$?3l&2scFNv%i@w(!l<PKheXDXmPZ)YeYb
z&ae#54o~Ouut-d+^h=4b@byp1%W(Fu49*NR(k~1s&k70i^2l)a_Ats1b}Dm8G08@^
z&D|(9*f~%kKhh%8q^Q)xCo(9f$}3yH#M>azD5}`KFf1h}Js{H2rM#e`G|0=%EGL~S
zCCN10BQV4wINjYMw5-@9tHjU8TiYZ!AS22n$)m`_AUi6^BFQr)w;01VGsh4k{d9#Q
z(;^e&l5i6P!%EMB63a3_-;&_sFvr{wk9>XC2=hQ^*Q8Q+CnHPK@^r4mygZjY)4=4i
zsxa4x#H#G7G*=@p!=fCI?2590s;I;=!}R>h%1mGPd`EP@ReHEM29_&SnJ4=c7)6$Z
z_!=gb7C8G>rC1cD8e|zI8d<tpM))Nrn-pca7KRmuhZ=B&Yx|lxrdj5NCg+t~hUA8q
z1!)^t80A%!8ylMEX9Zi9YFA~Ym6RI>d0?gzZMTZBbcH;VpzKhO$bhUseOI5P{IH~K
zr)1wsPeW}#@2GUYkgV*2DtDtwqq4|~d@fJJEH^_p|ELhR5Z9ovuq@N`szeVzlgJFi
zGVS6hKi?|zvQigUld@DVjF5B=O3NyCRLCd{3X61(@`*Hy%1Oye^7VB#_Db;#2~E!^
zD>W)j^oTSLD=R87b~SS<=khEmFs;(gGpKOObcqUgvk0yV@eDH0H*hyAcQ;9Q_xJKF
zjr6l{FAocGMGwic@-WY`K!xyNSM$O&-|VW)O82Zt%OW3>)KY&ZgCs-4;uQDnyr_s&
zV}DZ<%dF6H3ohpXqhP=E0xv(qV5dCO<RY^i(~=0+z>-kEv^?X0kVs?y)ZlcJtP)e>
ze01B=oQleg(-jJg+)VWgU0ljbtCG#jEWNVR43h%N^vzup%RRJ9Ej<EqN-FXa1Ij&|
z%DLP<-E-WMQ$nLm1HuanO)A2J@{EcqjeXpL(gJ)!jY@OP(h3dC^U7Qki_vWhHmwLu
zOIHYw2nq{vN(o6cwKO*_i%83JPcih%$u2k3_A$%P(=InmHw!Q>56(#ra^*^O^iA~e
z4=X7tbk%nBDm6(Ccdc+WFA8^c2`VZq^KnZy&&zN%@ig<u#qe81Kt)<;pn_Ansf$aZ
zvuTJ$np?J$S8l$OVUcB^hige%rJs3ufmc?Dw_8ARW@t`@Cs%r)X>oRmw`D<cd6;98
zzgvK3Wmu$hMY^khW=U0kpo@8qqqbpMPOza5Mk)y|a52qIS1_$A2y}^Z@z4&<uXKzw
zcF)ZYOHMb*^9s;5axw`IFmp-rG7n72b1KX*;3{`_Pc5;GFe?c1h%n2~3vl(wH_Y}+
z&j~B`$}KCdOe;1kH_@)lv-I@!MGr~uY>VQ&bcOVa{48IK;PhnU+^Dp$oD%P(>|FO!
zeS@$tmsHCtGatV+?@aA<=e*R=d@f7J{IFnskG!ZzZD+5*Ov7Y<({k6K{FE}6JTIe&
zO6|-<-@wugf4>YTaGH#-GS^KnN=+<IRZz6{t8ul6tx!nzRw$1)D^f6u<Z|`(Gz#`9
zDsj#-NX#=S4~Q%*4cB)`bxAQU&n(W(@i)#+uJS7NDc1K+%FjrNDDm?S)92FF)m11f
zO(}FM3kh`3^eV_JEKkaGvncd%GD_CYHwX_6HFYvA4)+f-uQbo|3FW$=c<|D6>A1{2
znS3jyIhHV%&At5Llj-fPjcyhHTz!xEB($vTcs5n@^p%^}8rNJZovozusQ3T#M!p)$
zlfCbZ3Uxd8wU%`SbyferH6g%iXJ%Nrh{#55`NIoxYS@?_?iKws@#M@Kanrf_<a70v
zC#Q?9El3L4FDSQTk>irGKL`3=D%Z^KoLQvkTwbaq_~h@7^4~?X8s(D03p-~|x+Snr
zTZH4A;q=TLXQR}OpI0`WPprQEjL-Pb!_}EPmo}gJsyKP0v$<@C?De+TqRjV2CjD7w
zujd}D2wo6ZI`!MD@&jI>{mG*0*|QuTF0xlEVs}-N?JE1&uWjM5Ty#S@U*U->#>zTJ
zUbP%pkUzsYu+j5Sq<P4Bou@8NGb-QrYo7`!IH-K~(;=^OB_T|GI~Je+5x0}gD!Q9(
zLg|l7Oz~RB9v@jb?f%i|BX=5t_APA@T>8%GhyA(x>um!wcy2w~tXaA3^!n|g-Z4)Z
zbP9Lh`gFDMP^Fbn?hEFymtoVkSoK?6=ST~hx!SxmPvvy>3-Q(0D#9*@evOf{P+YXt
zQK8;+nyP4?Q^+=^*o&(RTTPNwmZ_eX3;uaJZ+p<e9jgqdR%T6W_T1jFRA||5n;KbO
z1<^wm>aVu&UA7II$7_H2pkB209A~%FD{ll$Y-@MmxN?l4>GC=~C$H%mVWx$L&)W;X
znHl@axA*Kp_Z4&5%|E}pCGh;Is`|gAxgp1+U&xoeh@93x{pO@svd0g{dUA?B*l_S?
zeuyp8j<>myrvLJKe|aBw$hh$Q+NP$^<%#E?c^?kj&$nyW!Ykh@cW2(Na$mA+qLk2k
z_h^p4TwRfWH}?r%XI9#uUs0p7)7tx&XON!qy|9bHmFv0^JPp{s$iJz7yLxWf!|)TO
zbK70-m)(reK4o}Y|H&`Yk4rnMHi?uP&G34{dcxf2ar9hwr!6(jPhNhmzHOeSyu5Ey
zrr51G?zj2-WhOJ6di;E6p<JnFf93i285aF@d(Zg)kd<~;7pQVlleXjJ_D@>S%OvZ2
zy2?oGklsR-JYUwSX09h4e=qF*$k`>>y3)0O(Vq2r7A%HWcd+D5+ac2w8nn|TZ6_-L
Dp{eb_

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index a0d3e7f..e955ff7 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -18,4 +18,5 @@ in
   "wolframalpha.age".publicKeys = all;
   "cloudflared-navidrome.json.age".publicKeys = all;
   "smb-secrets.age".publicKeys = all;
+  "sasl_relay_passwd.age".publicKeys = all;
 }