|
root@culturestrings |
6d66f2 |
# chain
|
|
root@culturestrings |
2faeb7 |
myhostname = mail.@smtphost@
|
|
root@culturestrings |
2faeb7 |
mydomain = @smtphost@
|
|
root@culturestrings |
6d66f2 |
myorigin = $mydomain
|
|
root@culturestrings |
6d66f2 |
mydestination = $mydomain, localhost.$mydomain, localhost, @server_domains@
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
1233a0 |
alias_maps = lmdb:/etc/aliases
|
|
root@culturestrings |
1233a0 |
alias_database = lmdb:/etc/aliases
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
c77c16 |
virtual_alias_domains = @mailing_lists@
|
|
root@culturestrings |
1233a0 |
virtual_alias_maps = lmdb:/etc/virtual
|
|
root@culturestrings |
c77c16 |
|
|
root@culturestrings |
6d66f2 |
compatibility_level = 2
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
relayhost =
|
|
root@culturestrings |
6d66f2 |
mynetworks = 127.0.0.0/8
|
|
root@culturestrings |
6d66f2 |
inet_interfaces = all
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
home_mailbox = Maildir/
|
|
root@culturestrings |
6d66f2 |
mailbox_size_limit = 0
|
|
root@culturestrings |
6d66f2 |
recipient_delimiter = +
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
queue_directory = /var/spool/postfix
|
|
root@culturestrings |
6d66f2 |
command_directory = /usr/sbin
|
|
root@culturestrings |
6d66f2 |
daemon_directory = /usr/lib/postfix/bin/
|
|
root@culturestrings |
6d66f2 |
data_directory = /var/lib/postfix
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
html_directory = /usr/share/doc/packages/postfix-doc/html
|
|
root@culturestrings |
6d66f2 |
manpage_directory = /usr/share/man
|
|
root@culturestrings |
6d66f2 |
sample_directory = /usr/share/doc/packages/postfix-doc/samples
|
|
root@culturestrings |
6d66f2 |
readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES
|
|
root@culturestrings |
6d66f2 |
mail_spool_directory = /var/mail
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
065c23 |
# dkim
|
|
root@culturestrings |
51269e |
smtpd_milters = unix:/var/spool/postfix/opendkim/opendkim.sock
|
|
root@culturestrings |
065c23 |
non_smtpd_milters = $smtpd_milters
|
|
root@culturestrings |
065c23 |
|
|
root@culturestrings |
065c23 |
milter_default_action = accept
|
|
root@culturestrings |
065c23 |
internal_mail_filter_classes = bounce
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
# tls ...
|
|
root@culturestrings |
6d66f2 |
tls_random_source = dev:/dev/urandom
|
|
root@culturestrings |
8a14ee |
tls_append_default_CA = no
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
smtp_tls_loglevel = 3
|
|
root@culturestrings |
6d66f2 |
smtp_tls_security_level = encrypt
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
smtp_tls_CApath = /etc/ssl/certs
|
|
root@culturestrings |
2faeb7 |
smtp_tls_CAfile = /srv/webroot/@smtphost@/ssl/cert.pem
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
2faeb7 |
smtpd_tls_key_file = /srv/webroot/@smtphost@/ssl/privkey.pem
|
|
root@culturestrings |
2faeb7 |
smtpd_tls_cert_file = /srv/webroot/@smtphost@/ssl/fullchain.pem
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
smtpd_tls_loglevel = 3
|
|
root@culturestrings |
373631 |
smtpd_tls_security_level = encrypt
|
|
root@culturestrings |
6d66f2 |
smtpd_tls_session_cache_timeout = 3600s
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
6d66f2 |
smtpd_use_tls = yes
|
|
root@culturestrings |
6d66f2 |
smtpd_tls_auth_only = yes
|
|
root@culturestrings |
6d66f2 |
smtpd_tls_received_header = yes
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
8a14ee |
smtpd_tls_CApath = /etc/easy-rsa/pki
|
|
root@culturestrings |
8a14ee |
smtpd_tls_CAfile = /etc/easy-rsa/pki/ca.crt
|
|
root@culturestrings |
6d66f2 |
|
|
root@culturestrings |
795398 |
smtpd_relay_restrictions = permit_mynetworks, permit_tls_all_clientcerts, reject_unauth_destination
|
|
root@culturestrings |
795398 |
smtpd_recipient_restrictions = permit_mynetworks, permit_tls_all_clientcerts, reject_unauth_destination
|
|
root@culturestrings |
795398 |
|
|
root@culturestrings |
3e61c6 |
smtpd_helo_required = yes
|
|
root@culturestrings |
3e61c6 |
smtpd_helo_restrictions = permit_mynetworks,
|
|
root@culturestrings |
3e61c6 |
permit_tls_all_clientcerts,
|
|
root@culturestrings |
3e61c6 |
reject_invalid_helo_hostname,
|
|
root@culturestrings |
3e61c6 |
reject_unknown_helo_hostname,
|
|
root@culturestrings |
3e61c6 |
reject_non_fqdn_helo_hostname
|
|
root@culturestrings |
3e61c6 |
|
|
root@culturestrings |
0b2051 |
smtpd_sender_restrictions = permit_mynetworks,
|
|
root@culturestrings |
0b2051 |
permit_tls_all_clientcerts,
|
|
root@culturestrings |
0b2051 |
reject_unknown_reverse_client_hostname,
|
|
root@culturestrings |
0b2051 |
reject_unknown_client_hostname
|
|
root@culturestrings |
0b2051 |
|
|
root@culturestrings |
0b2051 |
|
|
root@culturestrings |
6d66f2 |
meta_directory = /usr/lib/postfix
|
|
root@culturestrings |
6d66f2 |
setgid_group = maildrop
|
|
root@culturestrings |
6d66f2 |
newaliases_path = /usr/bin/newaliases
|
|
root@culturestrings |
6d66f2 |
mailq_path = /usr/bin/mailq
|
|
root@culturestrings |
6d66f2 |
sendmail_path = /usr/sbin/sendmail
|
|
root@culturestrings |
6d66f2 |
mail_owner = postfix
|
|
root@culturestrings |
6d66f2 |
shlib_directory = /usr/lib/postfix
|
|
root@culturestrings |
6d66f2 |
inet_protocols = ipv4
|