tree 74e21cd26f26610e0d32819d30d3593f52b08166
parent ed486d508e8518c68263e029fe86326a53bdf046
author Nico Huber <nico.h@gmx.de> 1689872934 +0000
committer Nico Huber <nico.h@gmx.de> 1689978919 +0000

Add Gerrit email account and send-email configuration

We'll have to store Gerrit's email credentials in plain text. Protecting
from outside connections using these in case they'd ever leak is tricky.
We match the account `gerrit@...` in `user.access` and then the local IP
address of the gerrit container in `gerrit-client.access`, only allowing
authenticated users (`permit_sasl_authenticated`) from this IP.

Alternatively, we could use `permit` which would allow the whole gerrit
container to send emails from `gerrit@...` without login. Then the setup
would also allow more efficient, plain-text communication between Gerrit
and Postfix. The password would still be needed to login to IMAP (assu-
ming no further, invasive changes).