# Main Postfix configuration # {{ ansible_managed }} smtpd_banner = {{ banner_hostname }} ESMTP $mail_name (Debian/GNU) biff = no append_dot_mydomain = no delay_warning_time = 48h maximal_queue_lifetime = 14d bounce_queue_lifetime = 14d readme_directory = no compatibility_level = 2 smtp_use_tls=yes smtp_tls_cert_file=/etc/ssl/{{ banner_hostname }}.crt smtp_tls_key_file=/etc/ssl/{{ banner_hostname }}.key smtpd_tls_cert_file=/etc/ssl/letsencrypt/infrastructure.pem smtpd_tls_key_file=/etc/ssl/letsencrypt/infrastructure.pem smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache myhostname = {{ myhostname }} mydomain = {{ mydomain }} alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases myorigin = /etc/mailname mydestination = localhost mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 {{ mynetworks }} mailbox_size_limit = 0 recipient_delimiter = + inet_interfaces = all inet_protocols = all swap_bangpath = no mynetworks_style = host smtpd_data_restrictions = reject_unauth_pipelining smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = yes smtp_tls_security_level = may smtp_tls_CAfile = $smtpd_tls_CAfile smtp_tls_loglevel = 0 smtp_tls_note_starttls_offer = yes proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions smtp_data_init_timeout = 240s smtp_data_xfer_timeout = 600s smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, check_helo_access pcre:/etc/postfix/helo_access.pcre queue_run_delay = 300s minimal_backoff_time = 300s maximal_backoff_time = 4000s enable_original_recipient = no disable_vrfy_command = yes home_mailbox = Maildir/ allow_min_user = no message_size_limit = 52428800 virtual_minimum_uid = 2000 virtual_uid_maps = static:2000 virtual_gid_maps = static:2000 virtual_mailbox_base = /srv/vmail transport_maps = proxy:ldap:/etc/postfix/ldap/transport_maps_user.cf, proxy:ldap:/etc/postfix/ldap/transport_maps_domain.cf, hash:/etc/postfix/transport virtual_alias_maps = proxy:ldap:/etc/postfix/ldap/virtual_alias_maps.cf, proxy:ldap:/etc/postfix/ldap/virtual_group_maps.cf, proxy:ldap:/etc/postfix/ldap/virtual_group_members_maps.cf, proxy:ldap:/etc/postfix/ldap/catchall_maps.cf virtual_mailbox_domains = proxy:ldap:/etc/postfix/ldap/virtual_mailbox_domains.cf virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap/virtual_mailbox_maps.cf sender_bcc_maps = proxy:ldap:/etc/postfix/ldap/sender_bcc_maps_user.cf, proxy:ldap:/etc/postfix/ldap/sender_bcc_maps_domain.cf recipient_bcc_maps = proxy:ldap:/etc/postfix/ldap/recipient_bcc_maps_user.cf, proxy:ldap:/etc/postfix/ldap/recipient_bcc_maps_domain.cf smtpd_sender_login_maps = proxy:ldap:/etc/postfix/ldap/sender_login_maps.cf smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = broken_sasl_auth_clients = yes smtpd_sasl_security_options = noanonymous smtpd_tls_auth_only = no smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination smtpd_relay_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination smtpd_tls_security_level = may smtpd_tls_loglevel = 0 tls_random_source = dev:/dev/urandom command_time_limit = 12h ipc_timeout = 12h mailbox_command = /usr/lib/dovecot/deliver virtual_transport = dovecot dovecot_destination_recipient_limit = 1 smtpd_sasl_type = dovecot smtpd_sasl_path = private/dovecot-auth smtp-amavis_destination_recipient_limit = 1 virtual_alias_domains =