aboutsummaryrefslogtreecommitdiff
path: root/cluster/prod/app/email/deploy
diff options
context:
space:
mode:
authorArmaël Guéneau <armael.gueneau@ens-lyon.org>2024-11-19 20:13:12 +0100
committerArmaël Guéneau <armael.gueneau@ens-lyon.org>2024-11-19 20:24:09 +0100
commitc66bff55f41bc132592c87b819756417201d3bf0 (patch)
tree26d06420e05e8e6fae6b83391f74813e5c36e7a5 /cluster/prod/app/email/deploy
parent3f51534e0335e1335312adebf8a285abcf9faf1b (diff)
downloadnixcfg-c66bff55f41bc132592c87b819756417201d3bf0.tar.gz
nixcfg-c66bff55f41bc132592c87b819756417201d3bf0.zip
postfix: add rate-limiting exceptions for our own nodes
Diffstat (limited to 'cluster/prod/app/email/deploy')
-rw-r--r--cluster/prod/app/email/deploy/email.hcl14
1 files changed, 14 insertions, 0 deletions
diff --git a/cluster/prod/app/email/deploy/email.hcl b/cluster/prod/app/email/deploy/email.hcl
index 10e4d50..7eea2ea 100644
--- a/cluster/prod/app/email/deploy/email.hcl
+++ b/cluster/prod/app/email/deploy/email.hcl
@@ -382,6 +382,20 @@ job "email" {
destination = "secrets/postfix/transport"
}
+ template {
+ data = <<EOH
+ {{- range ls "diplonat/autodiscovery/ipv4" }}
+ {{- with $a := .Value | parseJSON }} {{ $a.address }}
+ {{- end }}
+ {{- end }}
+ {{- range ls "diplonat/autodiscovery/ipv6" }}
+ {{- with $a := .Value | parseJSON }} [{{ $a.address }}]
+ {{- end }}
+ {{- end }}
+ EOH
+ destination = "secrets/postfix/rate-limit-exceptions"
+ }
+
# --- secrets ---
template {
data = "{{ with $d := key \"tricot/certs/smtp.deuxfleurs.fr\" | parseJSON }}{{ $d.cert_pem }}{{ end }}"