From 840f99a7e924f54e0de4ccd95cdde2263a57c262 Mon Sep 17 00:00:00 2001 From: Dominik Polakovics Date: Mon, 1 Dec 2025 23:02:35 +0100 Subject: [PATCH] feat(amzebs-01): update to 25.11 --- hosts/amzebs-01/channel | 1 + hosts/amzebs-01/configuration.nix | 3 ++- hosts/amzebs-01/modules/postfix.nix | 10 +++++----- 3 files changed, 8 insertions(+), 6 deletions(-) create mode 100644 hosts/amzebs-01/channel diff --git a/hosts/amzebs-01/channel b/hosts/amzebs-01/channel new file mode 100644 index 0000000..57f31e7 --- /dev/null +++ b/hosts/amzebs-01/channel @@ -0,0 +1 @@ +https://channels.nixos.org/nixos-25.11 diff --git a/hosts/amzebs-01/configuration.nix b/hosts/amzebs-01/configuration.nix index c90cb23..a4b9faf 100644 --- a/hosts/amzebs-01/configuration.nix +++ b/hosts/amzebs-01/configuration.nix @@ -3,6 +3,7 @@ ./utils/bento.nix ./utils/modules/sops.nix ./utils/modules/nginx.nix + ./utils/modules/set-nix-channel.nix ./modules/mysql.nix ./modules/web/stack.nix @@ -76,5 +77,5 @@ ''; }; - system.stateVersion = "23.11"; + system.stateVersion = "25.11"; } diff --git a/hosts/amzebs-01/modules/postfix.nix b/hosts/amzebs-01/modules/postfix.nix index 4ce04df..1c97c57 100644 --- a/hosts/amzebs-01/modules/postfix.nix +++ b/hosts/amzebs-01/modules/postfix.nix @@ -35,11 +35,11 @@ in compatibility_level = "2"; # Only accept mail from localhost - mynetworks = "127.0.0.0/8 [::1]/128"; + mynetworks = [ "127.0.0.0/8" "[::1]/128" ]; # Larger message size limits for attachments - mailbox_size_limit = "202400000"; # ~200MB - message_size_limit = "51200000"; # ~50MB + mailbox_size_limit = 202400000; # ~200MB + message_size_limit = 51200000; # ~50MB # Ensure proper header handling # Reject mail that's missing critical headers @@ -47,8 +47,8 @@ in # Rate limiting to prevent spam-like behavior # Allow reasonable sending rates for applications - smtpd_client_message_rate_limit = "100"; - smtpd_client_recipient_rate_limit = "200"; + smtpd_client_message_rate_limit = 100; + smtpd_client_recipient_rate_limit = 200; # Milter configuration is handled automatically by rspamd.postfix.enable };