diff options
Diffstat (limited to 'roles/postfix/templates/main.cf.j2')
| -rw-r--r-- | roles/postfix/templates/main.cf.j2 | 48 |
1 files changed, 48 insertions, 0 deletions
diff --git a/roles/postfix/templates/main.cf.j2 b/roles/postfix/templates/main.cf.j2 new file mode 100644 index 0000000..80e880a --- /dev/null +++ b/roles/postfix/templates/main.cf.j2 @@ -0,0 +1,48 @@ +# See /usr/share/postfix/main.cf.dist for a commented, more complete version + + +compatibility_level = 2 + +smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) +biff = no + +# appending .domain is the MUA's job. +append_dot_mydomain = no + +# Uncomment the next line to generate "delayed mail" warnings +#delay_warning_time = 4h + +readme_directory = no + +# TLS parameters +smtpd_tls_cert_file = /etc/letsencrypt/live/www.brentj.es/fullchain.pem +smtpd_tls_key_file = /etc/letsencrypt/live/www.brentj.es/privkey.pem +smtpd_use_tls=yes +smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache +smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache + +# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for +# information on enabling SSL in the smtp client. + +smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination +myhostname = alexstrasza.kassala.de +alias_maps = hash:/etc/aliases +alias_database = hash:/etc/aliases +myorigin = /etc/mailname +mydestination = alexstrasza.kassala.de, localhost.kassala.de, localhost +relayhost = +mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 +mailbox_size_limit = 0 +recipient_delimiter = + +inet_interfaces = all +virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf +virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf +virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf +virtual_transport = dovecot +dovecot_destination_recipient_limit = 1 +smtpd_sasl_type = dovecot +smtpd_sasl_path = private/auth +smtpd_sasl_auth_enable = yes +smtpd_tls_security_level = may +smtpd_tls_auth_only = yes +smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination |