add mail role

2025-07-31 17:36:58 +02:00 · 2025-07-31 17:36:58 +02:00 · ca62eb6639
commit ca62eb6639
parent 6525887058
6 changed files with 259 additions and 5 deletions
--- a/shared/commons/nftables.nix
+++ b/shared/commons/nftables.nix
@ -65,6 +65,14 @@ in
                                udp dport 53 accept
                            '' else ""}

+                            ${if lib.elem myName mapping.mail.hosts then ''
+                                # Mail server (without IMAP)
+                                # With support for both SSL & STARTTLS
+                                tcp dport 25 accept
+                                tcp dport 465 accept
+                                tcp dport 587 accept
+                            '' else ""}
+
                            # Log anything else
                            ip protocol tcp counter log prefix "tcp.in.dropped: "
                            ip protocol udp counter log prefix "udp.in.dropped: "