From 4b41aa371816579c73e24186de479e7d419ebe71 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Tue, 14 Mar 2023 11:35:56 +0000
Subject: [PATCH] postfix: group forwarded ports by host

---
 hosts/by-name/servo/services/postfix.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/hosts/by-name/servo/services/postfix.nix b/hosts/by-name/servo/services/postfix.nix
index 07250adf..d3364da4 100644
--- a/hosts/by-name/servo/services/postfix.nix
+++ b/hosts/by-name/servo/services/postfix.nix
@@ -30,11 +30,14 @@ in
   ];
 
   networking.firewall.allowedTCPPorts = [
-    25   # SMTP
+    # exposed over non-vpn imap.uninsane.org
     143  # IMAP
+    993  # IMAPS
+
+    # exposed over vpn mx.uninsane.org
+    25   # SMTP
     465  # SMTPS
     587  # SMTPS/submission
-    993  # IMAPS
   ];
 
   # exists only to manage certs for dovecot