sys/mta: enable opendkim signing for virtual domains

1 files changed, 4 insertions, 3 deletions

diff --git a/sys/mta/default.nix b/sys/mta/default.nix
index de91dc4..6bca74f 100644
--- a/sys/mta/default.nix
+++ b/sys/mta/default.nix
@@ -4,6 +4,8 @@ with lib; let
 
   inherit (config.local) domains virtual users;
   inherit (config.networking) domain;
+
+  virtualDomains = filterAttrs (name: _: name != domain) virtual;
 in
 {
   options.local.mta = {
@@ -32,8 +34,8 @@ in
         enable = true;
 
         group = "postfix";
-        domains = "csl:${domain}";
-        selector = "202402";
+        domains = "csl:" + concatStringsSep "," ([ domain ] ++ attrNames virtualDomains);
+        selector = "202408";
 
         configFile = pkgs.writeText "opendkim.conf" ''
           UMask 007
@@ -43,7 +45,6 @@ in
       postfix =
         let
           cert = config.security.acme.certs.${domains.smtp.main}.directory;
-          virtualDomains = filterAttrs (name: _: name != domain) virtual;
         in
         {
           enable = true;