bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

mailu: harden relay restrictions

Browse Source
This commit is contained in:
Brad Stein 2026-01-06 09:03:28 -03:00
parent 5fcff4fc8a
commit 7d64f0d1d9
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
services/mailu/helmrelease.yaml
View File

@ -219,6 +219,11 @@ spec:
overrides: overrides:
postfix.cf: | postfix.cf: |
smtpd_relay_restrictions = permit_sasl_authenticated, reject_unauth_destination smtpd_relay_restrictions = permit_sasl_authenticated, reject_unauth_destination
smtpd_sender_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain, reject_sender_login_mismatch, reject_authenticated_sender_login_mismatch
smtpd_tls_auth_only = yes
smtpd_client_connection_rate_limit = 30
smtpd_client_message_rate_limit = 100
smtpd_client_recipient_rate_limit = 200
podAnnotations: podAnnotations:
bstein.dev/restarted-at: "2026-01-06T00:00:00Z" bstein.dev/restarted-at: "2026-01-06T00:00:00Z"
redis: redis: