nixcfg/systems/x86_64-linux/mx/rspamd.nix

{ pkgs, lib, ... }:
{
  services.rspamd.workers.controller.bindSockets = [{
    socket = "/run/rspamd/worker-controller.sock";
    mode = "0660";
  }];
  services.rspamd.locals = {
    "settings.conf".text = ''
      bogenschiessen {
        from = "bogensport-jugend@gmx.de";
        apply {
          actions {
            reject = 100.0;
            greylist = null; # Disable greylisting (from 1.8.1)
            "add header" = 100.0; # Please note the space, NOT an underscore
          }
        }
      }
    '';
    "maps.d/spf_whitelist.inc.local".text = ''
      epicgames.com
      dmail.ai
      twitter.com
      x.com
      gmx.de
    '';
    "maps.d/spf_dkim_whitelist.inc.local".text = ''
      epicgames.com
      dmail.ai
      twitter.com
      x.com
      gmx.de
    '';
    "maps.d/dmarc_whitelist.inc.local".text = ''
      epicgames.com
      dmail.ai
      twitter.com
      x.com
      gmx.de
    '';
    "greylist-whitelist-domains.inc".text = ''
      dmail.ai
      epicgames.com
      twitter.com
      x.com
      gmx.de
    '';
  };
  services.rspamd.extraConfig = ''
    actions {
      reject = null;
      greylist = 4; # Apply greylisting when reaching this score
      add_header = 4; # Add header when reaching this score
    }
  '';
}