caliban: allow opendkim while we're not validating
Martin Weinelt committed
May 25, 2026 at 15:57 UTC
ec5e5ad1fb4052a278f0f3a0520d96fae2824438
1 file changed
+5
non-critical-infra/modules/postfix.nix
+5
@@ -14,6 +14,11 @@
14
keyPath = "/run/opendkim-keys";
15
};
16
17
+ # Permitted as long as we're only signing and not validating
18
+ nixpkgs.config.permittedInsecurePackages = [
19
+ "opendkim-2.11.0-Beta2"
20
+ ];
21
+
22
systemd.services.opendkim.serviceConfig = {
23
ExecStartPre = [
24
"+${pkgs.writeShellScript "opendkim-keys" ''