From d301d6dc27789f4c06c98509c372bfd12672aaf6 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sun, 8 Feb 2026 22:36:54 -0600
Subject: sys/mta: set the SMTP bind address for the primary MX instance

---
 sys/nspawn/dmz.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'sys/nspawn/dmz.nix')

diff --git a/sys/nspawn/dmz.nix b/sys/nspawn/dmz.nix
index 4cb3901..626993d 100644
--- a/sys/nspawn/dmz.nix
+++ b/sys/nspawn/dmz.nix
@@ -36,6 +36,11 @@ in {
       readOnly = true;
     };
 
+    mtaAddr6 = mkOption {
+      type = types.str;
+      readOnly = true;
+    };
+
     system = mkOption {
       type = types.raw;
     };
@@ -64,6 +69,7 @@ in {
       mailHost.mdaListen = cfg.hostAddr6;
 
       nspawn.dmz = {
+        mtaAddr6 = dmzNet.hosts.mta.v6.address;
         hostAddr6 = dmzNet.hosts.gateway.v6.address;
 
         system = let
@@ -78,6 +84,7 @@ in {
 
                 mta = {
                   mdaAddr = "[${mailHost.mdaListen}]";
+                  mtaListen = cfg.mtaAddr6;
                   inherit (mailHost) saslPort lmtpPort;
                 };
 
-- 
cgit v1.2.3