# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = mail.[meine-domain.de]
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
bounce_queue_lifetime = 3d
delay_warning_time = 1h
readme_directory = no
# TLS parameters
smtpd_tls_CAfile=/etc/postfix/certs/1_root_bundle.crt
smtpd_tls_cert_file=/etc/letsencrypt/live/[meine-domain.de]/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/[meine-domain.de]/privkey.pem
smtpd_tls_security_level=may
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = mail.[meine-domain.de]
# Virtual mailbox configuration
# Domains seperated by ,
virtual_mailbox_domains = [meine-domain.de]
virtual_mailbox_base = /var/vmail
virtual_uid_maps = 5000
virtual_gid_maps = 5000
virtual_transport = lmtp:unix:private/dovecot-lmtp
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = mail.[meine-domain.de]
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = mail, localhost.localdomain, localhost
#relayhost = in-v3.mailjet.com
#smtp_sasl_auth_enable = yes
#smtp_sasl_password_maps = hash:/etc/postfix/sasl_auth
#smtp_sasl_security_options = noanonymous
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.56.201/32
mailbox_size_limit = 0
home_mailbox = Maildir/
recipient_delimiter = +
inet_interfaces = all
disable_dns_lookups = no
message_size_limit = 2048000000
virtual_mailbox_limit = 4096000000
address_verify_negative_cache = no
#Policies
#strict_rfc831_envelopes = yes
#disable_vrfy_command = yes
smtpd_delay_reject = yes
#Custom responses
#unverified_recipient_reject_reason = 550 5.1.1 User doesn't exist.
# Restrictions in order: client, helo, sender, relay/recipient
smtpd_client_restrictions = permit_mynetworks,
reject_unauth_pipelining,
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
smtpd_sender_restrictions = permit_mynetworks,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
# check_sender_access hash:/etc/postfix/sender_access,
# Reject destination we're not responsible for, limit abuse or
# prevent postfix become an open relay. (version >= 2.10 required)
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination,
smtpd_recipient_restrictions =
# General rules
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
# Our users
permit_mynetworks,
permit_sasl_authenticated,
# Spam filters
reject_rbl_client zen.spamhaus.org,
reject_rhsbl_reverse_client dbl.spamhaus.org,
reject_rhsbl_helo dbl.spamhaus.org,
reject_rhsbl_sender dbl.spamhaus.org,
# This should be next-to-last
# check_policy_service unix:private/postgrey,
permit
