Merge pull request #650 from genebean/nixnuc-postfix-relay

A minimal Postfix instance on nixnuc accepts local mail submissions from
services and relays everything to hetznix01.atlas-snares.ts.net on port 25
via the Tailscale tunnel. Root and gene aliases forward to @technicalissues.us.
The simple-nixos-mailserver module (postfix + dovecot stack) is removed since
nixnuc does not receive external mail. The nginx server alias for
mail.home.technicalissues.us is dropped. The private-flake input is pinned to
the nixnuc-postfix-relay branch to pick up the matching relay trust change on
hetznix01.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

flake.lock

@@ -740,11 +740,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1777743346,
+        "lastModified": 1779934676,
-        "narHash": "sha256-gJ0aOSvmr1g06oSKGNDlIvfex7BVVxyP3txQ9gg2fdQ=",
+        "narHash": "sha256-wp/K//HuAPN0TureyV342zjoee+vSq64+guX35X7DMU=",
         "owner": "genebean",
         "repo": "private-flake",
-        "rev": "8a0c1d3cf8a4eee614ac8c665dce70794de5f973",
+        "rev": "7ad20ffceb1b6e48af13b2207241441a2cafa97e",
         "type": "github"
       },
       "original": {

flake.nix

@@ -180,7 +180,6 @@
           additionalModules = [
             inputs.cup-collector.nixosModules.default
             inputs.private-flake.nixosModules.private.nixnuc
-            inputs.simple-nixos-mailserver.nixosModule
           ];
         };
         # This machines is currently running Ubuntu and

modules/hosts/nixos/nixnuc/default.nix

@@ -68,25 +68,6 @@ in
     ];
   };
 
-  mailserver = {
-    enable = true;
-    enableImap = false;
-    enableImapSsl = false;
-    fqdn = "mail.${home_domain}";
-    domains = [
-      home_domain
-    ];
-    forwards = {
-      "${username}@localhost" = "${username}@technicalissues.us";
-      "root@localhost" = "root@technicalissues.us";
-      "root@${config.networking.hostName}" = "root@technicalissues.us";
-    };
-    stateVersion = 3;
-
-    # Use Let's Encrypt certificates from Nginx
-    certificateScheme = "acme";
-  };
-
   networking = {
     # Open ports in the firewall.
     firewall = {
@@ -326,7 +307,6 @@ in
         "${home_domain}" = {
           default = true;
           serverAliases = [
-            "mail.${home_domain}"
             "nix-tester.${home_domain}"
           ];
           listen = [