rspam needs SYS_ADMIN to use DynamicUser

dovecot.nix

@@ -2,6 +2,8 @@
 
 with lib;
 let
+  cfg = config.fudo.mail.dovecot;
+
   sievePath = let
     isRegularFile = _: type: type == "regular";
     sieves = filter isRegularFile (builtins.readDir ./sieves);

mail-server.nix

@@ -342,6 +342,7 @@ in {
               ];
               user = mkUserMap "mailserver-antivirus";
               volumes = [ "${cfg.state-directory}/antivirus:/state" ];
+              capabilities.SYS_ADMIN = true;
             };
             nixos = {
               useSystemd = true;

rspamd.nix

@@ -63,11 +63,11 @@ in {
           }
         '';
 
-        "rbl.conf".text = ''
-          rbls {
-            an_rbl
-          }
-        '';
+        # "rbl.conf".text = ''
+        #   rbls {
+        #     an_rbl
+        #   }
+        # '';
       };
 
       overrides."milter_headers.conf".text = "extended_spam_headers = true;";