From a1ff289bf91754b5ccb836ba7220a1bd5d4c5105 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Wed, 7 May 2025 18:00:16 +0200
Subject: [PATCH] dovecot: migrate queue-status to UNIX domain socket

---
 mail-server/dovecot.nix | 6 ++++++
 mail-server/postfix.nix | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/mail-server/dovecot.nix b/mail-server/dovecot.nix
index c75aff2..64a13b2 100644
--- a/mail-server/dovecot.nix
+++ b/mail-server/dovecot.nix
@@ -307,6 +307,12 @@ in
         }
 
         service quota-status {
+          inet_listener {
+            port = 0
+          }
+          unix_listener quota-status {
+            user = postfix
+          }
           vsz_limit = ${builtins.toString cfg.quotaStatusMemoryLimit} MB
         }
 
diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix
index 63ade37..db3e581 100644
--- a/mail-server/postfix.nix
+++ b/mail-server/postfix.nix
@@ -268,7 +268,7 @@ in
           "check_recipient_access ${mappedFile "denied_recipients"}"
           "check_recipient_access ${mappedFile "reject_recipients"}"
           # quota checking
-          "check_policy_service inet:localhost:12340"
+          "check_policy_service unix:/run/dovecot2/quota-status"
         ];
 
         # TLS settings, inspired by https://github.com/jeaye/nix-files