This was added before Stalwart was our live mailserver. At that point, we could only access it over Tailscale. Nowadays, we can access it without this record, so it's better to avoid it as it only serves to make the Tailscale network different to the live internet.
-9
packetmix/systems/teal/stalwart.nix
-9
packetmix/systems/teal/stalwart.nix
···
31
imports = [ "${project.inputs.nixos-unstable.src}/nixos/modules/services/mail/stalwart-mail.nix" ];
32
33
config = {
34
-
services.headscale.settings.dns.extra_records = [
35
-
{
36
-
# mail.freshly.space -> teal
37
-
name = "mail.freshly.space";
38
-
type = "A";
39
-
value = "100.64.0.5";
40
-
}
41
-
];
42
-
43
services.stalwart-mail = {
44
enable = true;
45
openFirewall = true;