From e781fdc64be64db35b5eb4ca7c0b10e1f6fd2d3f Mon Sep 17 00:00:00 2001
From: Viktor Barzin <vbarzin@gmail.com>
Date: Mon, 1 Jan 2024 20:38:09 +0000
Subject: [PATCH] increase max msg limit and reject unknown client hostname [ci
 skip]

---
 modules/kubernetes/mailserver/main.tf | 44 ++++++++++++++-------------
 1 file changed, 23 insertions(+), 21 deletions(-)

diff --git a/modules/kubernetes/mailserver/main.tf b/modules/kubernetes/mailserver/main.tf
index 8c40a7e0..0321564d 100644
--- a/modules/kubernetes/mailserver/main.tf
+++ b/modules/kubernetes/mailserver/main.tf
@@ -29,21 +29,23 @@ resource "kubernetes_config_map" "mailserver_env_config" {
   }
 
   data = {
-    DMS_DEBUG           = "0"
-    ENABLE_CLAMAV       = "0"
-    ENABLE_FAIL2BAN     = "0"
-    ENABLE_FETCHMAIL    = "0"
-    ENABLE_POSTGREY     = "0"
-    ENABLE_SASLAUTHD    = "0"
-    ENABLE_SPAMASSASSIN = "0"
-    ENABLE_SRS          = "1"
-    FETCHMAIL_POLL      = "120"
-    ONE_DIR             = "1"
-    OVERRIDE_HOSTNAME   = "mail.viktorbarzin.me"
-    TLS_LEVEL           = "intermediate"
-    SSL_TYPE            = "manual"
-    SSL_CERT_PATH       = "/tmp/ssl/tls.crt"
-    SSL_KEY_PATH        = "/tmp/ssl/tls.key"
+    DMS_DEBUG                              = "0"
+    ENABLE_CLAMAV                          = "0"
+    ENABLE_FAIL2BAN                        = "0"
+    ENABLE_FETCHMAIL                       = "0"
+    ENABLE_POSTGREY                        = "0"
+    ENABLE_SASLAUTHD                       = "0"
+    ENABLE_SPAMASSASSIN                    = "0"
+    ENABLE_SRS                             = "1"
+    FETCHMAIL_POLL                         = "120"
+    ONE_DIR                                = "1"
+    OVERRIDE_HOSTNAME                      = "mail.viktorbarzin.me"
+    POSTFIX_MESSAGE_SIZE_LIMIT             = 1024 * 1024 * 200 # 200 MB
+    POSTFIX_REJECT_UNKNOWN_CLIENT_HOSTNAME = "1"
+    TLS_LEVEL                              = "intermediate"
+    SSL_TYPE                               = "manual"
+    SSL_CERT_PATH                          = "/tmp/ssl/tls.crt"
+    SSL_KEY_PATH                           = "/tmp/ssl/tls.key"
   }
 }
 
@@ -183,12 +185,12 @@ resource "kubernetes_deployment" "mailserver" {
             sub_path   = "postfix-accounts.cf"
             read_only  = true
           }
-          volume_mount {
-            name       = "config"
-            mount_path = "/tmp/docker-mailserver/postfix-main.cf"
-            sub_path   = "postfix-main.cf"
-            read_only  = true
-          }
+          # volume_mount {
+          #   name       = "config"
+          #   mount_path = "/tmp/docker-mailserver/postfix-main.cf"
+          #   sub_path   = "postfix-main.cf"
+          #   read_only  = true
+          # }
           volume_mount {
             name       = "config"
             mount_path = "/tmp/docker-mailserver/postfix-virtual.cf"