fix: disable mta-sts

config/services/stalwart.nix

@@ -152,7 +152,6 @@ in
         [
           "autoconfig.${domain}"
           "autodiscover.${domain}"
-          "mta-sts.${domain}"
         ]
         (_: {
           forceSSL = true;
@@ -638,6 +637,9 @@ in
           ];
         };
 
+        # needs certificate for all domain
+        # Dane is better anyway
+        session.mta-sts.mode = "none";
         session.ehlo = {
           require = true;
           reject-non-fqdn = [

hosts/mailnix/net.nix

@@ -58,10 +58,6 @@
       domain = config.secrets.secrets.global.domains.mail_public;
       extraDomainNames = [ "*.${config.secrets.secrets.global.domains.mail_public}" ];
     };
-    "${config.secrets.secrets.global.domains.mail_private}" = {
-      domain = config.secrets.secrets.global.domains.mail_private;
-      extraDomainNames = [ "*.${config.secrets.secrets.global.domains.mail_private}" ];
-    };
   };
   environment.persistence."/state".directories = [
     {