Use postfix options for routing mails through ssh tunnel

Signed-off-by: Egor Savkin <es@m-labs.hk>

@@ -1179,0 +1193,4 @@
+      @m-labs.hk :
+      @m-labs.ph :
+      @193thz.com :
+      @malloctech.fr :

@@ -219,0 +235,4 @@
+          address = "0.0.0.0";
+          prefixLength = 0;
+          via = "5.78.86.156";
+          options.table = "2";

@@ -1190,0 +1245,4 @@
+  services.postfix = {
+    config = {
+      sender_dependent_relayhost_maps = "hash:/etc/postfix/sender_relay";
+      postscreen_upstream_proxy_protocol = "haproxy";

@@ -219,0 +223,4 @@
+      ttl = 255;
+      type = "tun";
+    };
+    interfaces.intl0 = {

@@ -230,0 +237,4 @@
+    interfaces.intl0 = {
+      ipv4.addresses = [
+        {
+          address = "10.42.0.2";

@@ -249,0 +256,4 @@
+            publicKey = "4RozbGZ9ENCjvJXGMB5aK1oqyZfD4UCarEHjSckwVGI=";
+            allowedIPs = [ "0.0.0.0/0" ];
+            endpoint = "5.78.86.156:51820";
+            persistentKeepalive = 25;

@@ -248,1 +248,4 @@
     };
+    wireguard.interfaces = {
+      intl0 = {
+        ips = [ "10.42.0.2/32" ];

@@ -1208,2 +1261,4 @@
   };
 
+  services.postfix.mapFiles.sender_transport = pkgs.writeText "sender_transport" ''
+      @m-labs-intl.com smtptun:

@@ -97,0 +99,4 @@
+        iptables -A INPUT -s 5.78.86.156 -p ah -j ACCEPT
+        iptables -A OUTPUT -d 5.78.86.156 -p gre -j ACCEPT
+        iptables -A OUTPUT -d 5.78.86.156 -p ah -j ACCEPT
+      '';

@@ -1252,0 +1265,4 @@
+        ExecStart = "${pkgs.postfix}/sbin/postmap /var/lib/postfix/conf/sender_transport";
+      };
+      wantedBy = [ "multi-user.target" ];
+  };

@@ -1261,1 +1278,4 @@
   } // (import /etc/nixos/secret/email_settings.nix);
+  services.postfix = {
+    config = {
+      sender_dependent_default_transport_maps = "hash:/var/lib/postfix/conf/sender_transport";

@@ -1262,0 +1286,4 @@
+      args = [
+        "-o" "smtp_bind_address=10.47.3.1"
+        "-o" "inet_interfaces=10.47.3.1"
+        "-o" "inet_protocols=ipv4"

@@ -1261,1 +1264,4 @@
   } // (import /etc/nixos/secret/email_settings.nix);
+  services.postfix = {
+    mapFiles.sender_transport = pkgs.writeText "sender_transport" ''
+        @m-labs-intl.com intltunnel:

@@ -1262,0 +1276,4 @@
+      args = [
+        "-o" "inet_interfaces=10.47.3.1"
+        "-o" "smtp_helo_name=mail.m-labs-intl.com"
+        "-o" "inet_protocols=ipv4"

@@ -1262,0 +1266,4 @@
+    mapFiles.sender_transport = pkgs.writeText "sender_transport" ''
+        @m-labs-intl.com intltunnel:
+        * :
+    '';

@@ -97,0 +97,4 @@
+      extraCommands = ''
+        iptables -A INPUT -s 5.78.86.156 -p gre -j ACCEPT
+        iptables -A INPUT -s 5.78.86.156 -p ah -j ACCEPT
+      '';

@@ -93,3 +93,3 @@
       allowedTCPPorts = [ 53 80 443 2222 7402 ];
       allowedUDPPorts = [ 53 67 500 4500 ];
-      trustedInterfaces = [ netifLan ];
+      trustedInterfaces = [ netifLan netifUSA ];