From 2c2d4b2fe693a12bb1634438026cb412e5a462cd Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Fri, 11 Apr 2025 01:49:42 +0200
Subject: [PATCH] mailserver: Enable DMARC reporting

When someone sends us mail and their domain has rua= configured in their
DMARC record we send back daily deliveriability summaries.
---
 non-critical-infra/modules/mailserver/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/non-critical-infra/modules/mailserver/default.nix b/non-critical-infra/modules/mailserver/default.nix
index 0f8fd7c7..beb05eb6 100644
--- a/non-critical-infra/modules/mailserver/default.nix
+++ b/non-critical-infra/modules/mailserver/default.nix
@@ -13,6 +13,13 @@
     fqdn = config.networking.fqdn;
 
     domains = [ "nixos.org" ];
+
+    dmarcReporting = {
+      enable = true;
+      domain = "nixos.org";
+      fromName = "NixOS.org DMARC Report";
+      organizationName = "NixOS";
+    };
   };
 
   sops.secrets."nixos.org.mail.key" = {