From 294a05ead630776149db1e5cd637a40cf6875ee9 Mon Sep 17 00:00:00 2001
From: Gab <24553253+gabrix73@users.noreply.github.com>
Date: Sun, 16 Aug 2026 17:35:18 +0200
Subject: Secure private onion Mail2News ingress

---
 deploy/postfix/diego-master.cf.fragment | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 deploy/postfix/diego-master.cf.fragment

(limited to 'deploy/postfix/diego-master.cf.fragment')

diff --git a/deploy/postfix/diego-master.cf.fragment b/deploy/postfix/diego-master.cf.fragment
new file mode 100644
index 0000000..2a2e1d5
--- /dev/null
+++ b/deploy/postfix/diego-master.cf.fragment
@@ -0,0 +1,12 @@
+# Dedicated ingress for the private Mail2News onion hidden service.
+127.0.0.1:2526 inet n - n - 4 smtpd
+  -o syslog_name=postfix/m2usenet-onion
+  -o myhostname=xilb7y4kj6u6qfo45o3yk2kilfv54ffukzei3puonuqlncy7cn2afwyd.onion
+  -o smtpd_tls_security_level=none
+  -o smtpd_sasl_auth_enable=no
+  -o smtpd_relay_restrictions=reject_unauth_destination
+  -o smtpd_recipient_restrictions=check_recipient_access,hash:/etc/postfix/m2usenet-ingress,reject
+  -o smtpd_reject_unlisted_recipient=yes
+  -o smtpd_helo_required=yes
+  -o smtpd_recipient_limit=1
+  -o message_size_limit=131072
-- 
cgit v1.2.3