From c2b7d6ff8999fdd6a5e3fc8927a754d5df8f79a0 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Wed, 31 Jul 2024 13:57:16 -0600
Subject: sys/mta: enable opendkim signing for virtual domains

---
 sys/mta/default.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/sys/mta/default.nix b/sys/mta/default.nix
index de91dc4..6bca74f 100644
--- a/sys/mta/default.nix
+++ b/sys/mta/default.nix
@@ -4,6 +4,8 @@ with lib; let
 
   inherit (config.local) domains virtual users;
   inherit (config.networking) domain;
+
+  virtualDomains = filterAttrs (name: _: name != domain) virtual;
 in
 {
   options.local.mta = {
@@ -32,8 +34,8 @@ in
         enable = true;
 
         group = "postfix";
-        domains = "csl:${domain}";
-        selector = "202402";
+        domains = "csl:" + concatStringsSep "," ([ domain ] ++ attrNames virtualDomains);
+        selector = "202408";
 
         configFile = pkgs.writeText "opendkim.conf" ''
           UMask 007
@@ -43,7 +45,6 @@ in
       postfix =
         let
           cert = config.security.acme.certs.${domains.smtp.main}.directory;
-          virtualDomains = filterAttrs (name: _: name != domain) virtual;
         in
         {
           enable = true;
-- 
cgit v1.2.3