From ab6d58749b71a6870f2adf8c7e40da093a25da43 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sat, 18 Feb 2023 13:26:48 -0600
Subject: dmz/mail: enable submission

---
 env/users/mailbox.nix | 2 +-
 sys/nspawn.nix        | 8 +++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/env/users/mailbox.nix b/env/users/mailbox.nix
index 8b2c4b2..eaec5fc 100644
--- a/env/users/mailbox.nix
+++ b/env/users/mailbox.nix
@@ -234,7 +234,7 @@ in
         groups.${config.services.dovecot2.mailGroup}.gid = 993;
       };
 
-      networking.firewall.allowedTCPPorts = [ 143 587 993 ];
+      networking.firewall.allowedTCPPorts = [ 143 993 ];
 
       local.certs.imap.enable = true;
     };
diff --git a/sys/nspawn.nix b/sys/nspawn.nix
index 195ba3c..2648eb3 100644
--- a/sys/nspawn.nix
+++ b/sys/nspawn.nix
@@ -83,7 +83,13 @@ in
           "${cfg.nspawn.dmz.system.toplevel}/init:/sbin/init"
         ];
 
-        networkConfig.Port = [ "tcp:25" "tcp:80" "tcp:443" "tcp:587" ];
+        networkConfig.Port = [
+          "tcp:25"
+          "tcp:80"
+          "tcp:443"
+          "tcp:465"
+          "tcp:587"
+        ];
       };
 
       network.networks."40-ve-dmz" = {
-- 
cgit v1.2.3