mirror/ infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-06 22:46:02 +02:00
Code Issues

Bump MTA STS id to invalid cache 

Fixes: 0b87cbfd ("mta_sts: Switch to enforce mode and bump max_age to 30 days")
This commit is contained in:
Kristian Klausen 2022-05-16 22:29:11 +02:00
parent 733a2133b5
commit eac26bfc98
No known key found for this signature in database
GPG Key ID: E2BE346E410366C3
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/mta_sts/templates/nginx.d.conf.j2
View File

@ -32,6 +32,7 @@ server {
location = /.well-known/mta-sts.txt {
default_type text/plain;
# Remember to bump the MTA-STS id in tf-stage1/archlinux.tf
return 200 'version: STSv1\nmode: enforce\nmax_age: 2592000\nmx: {{ config.mx | join('\\nmx: ')}}\n';
}

4
tf-stage1/archlinux.tf
View File

@ -193,8 +193,8 @@ locals {
"_smtp._tls.aur" = { value = "v=TLSRPTv1;rua=mailto:postmaster@archlinux.org" }
"_smtp._tls.master-key" = { value = "v=TLSRPTv1;rua=mailto:postmaster@archlinux.org" }
"_smtp._tls.lists" = { value = "v=TLSRPTv1;rua=mailto:postmaster@archlinux.org" }
# Generated with: date +%s
"_mta-sts" = { value = "v=STSv1; id=1608210175" }
# Generated with: date +%Y%m%d01
"_mta-sts" = { value = "v=STSv1; id=2022051601" }
"@" = { value = "v=spf1 ip4:${hcloud_server.machine["mail.archlinux.org"].ipv4_address} ip6:${hcloud_server.machine["mail.archlinux.org"].ipv6_address} ~all" }
"mail" = { value = "v=spf1 ip4:${hcloud_server.machine["mail.archlinux.org"].ipv4_address} ip6:${hcloud_server.machine["mail.archlinux.org"].ipv6_address} ~all" }
"aur" = { value = "v=spf1 ip4:${hcloud_server.machine["mail.archlinux.org"].ipv4_address} ip6:${hcloud_server.machine["mail.archlinux.org"].ipv6_address} ~all" }