machines/nix/systems/aarch64-linux/mx.kaareskovgaard.net/mailserver/dane.nix
Kaare Hoff Skovgaard fbe957b046
Some checks failed
/ check (push) Failing after 1m22s
/ dev-shell (push) Successful in 1m55s
/ rust-packages (push) Successful in 13m34s
/ systems (push) Successful in 54m5s
/ terraform-providers (push) Successful in 13m26s
Move the setup of the mailserver around
Currently delivery of mails is broken. There's some work
to be done in accounts.nix. But once done this should (I think)
support all the use cases desired.
2025-07-31 00:04:13 +02:00

6 lines
368 B
Nix

# I cannot right now figure out the best way forward with implementing DANE.
# It seems to me that the server itself needs access to cloudflare to update its
# DNS records, then I need to coordinate with the ACME setup to not rotate the key (reuse_key)
# before the DNS records are updated.
# This all seems like a lot of hassle, and for now, I am foregoing this.
{ }