From 9e54ecedf9a52e7a012a620f131a8a6c526a36b0 Mon Sep 17 00:00:00 2001
From: Charlotte Van Petegem <charlotte.vanpetegem@ugent.be>
Date: Thu, 9 Nov 2023 15:25:22 +0100
Subject: [PATCH] mail: allow mails from outlook outbound to skip SPF checks

---
 modules/services/mail/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/services/mail/default.nix b/modules/services/mail/default.nix
index c9f24ab7..ace201be 100644
--- a/modules/services/mail/default.nix
+++ b/modules/services/mail/default.nix
@@ -83,6 +83,9 @@ in
       certificateFile = certFile;
       keyFile = keyFile;
       dkimKeyDirectory = "${config.chvp.dataPrefix}/var/dkim";
+      policydSPFExtraConfig = ''
+        whitelist = 40.92.0.0/15,40.107.0.0/16,52.100.0.0/14,104.47.0.0/17,2a01:111:f400::/48,2a01:111:f403::/49,2a01:111:f403:8000::/50,2a01:111:f403:c000::/51,2a01:111:f403:f000::/52
+      '';
     };
 
     services.postfix = {