diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-03-20 19:16:32 +0100 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-03-20 19:16:32 +0100 |
| commit | 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 (patch) | |
| tree | 9221704f413398cfb5d5759083b1e7032566820e /straper/db/public/postfix/main.cf | |
| parent | 6b59b75c3a294060dea66bdee16ffaf95ae92889 (diff) | |
| download | bin-39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2.tar.gz bin-39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2.zip | |
feat: first fully successful run e2e on straper
Diffstat (limited to 'straper/db/public/postfix/main.cf')
| -rw-r--r-- | straper/db/public/postfix/main.cf | 90 |
1 files changed, 90 insertions, 0 deletions
diff --git a/straper/db/public/postfix/main.cf b/straper/db/public/postfix/main.cf new file mode 100644 index 0000000..617078b --- /dev/null +++ b/straper/db/public/postfix/main.cf @@ -0,0 +1,90 @@ +# See /usr/share/postfix/main.cf.dist for a commented, more complete version + +# See http://www.postfix.org/COMPATIBILITY_README.html +compatibility_level = 3.9 + +# Which domain that locally-originated mail appears to come from. +# Debian policy suggests to read this value from /etc/mailname. +#XX needs a review in postinst&config +#myorigin = /etc/mailname +#myorigin = $mydomain +myorigin = $myhostname + +# Text that follows the 220 code in the SMTP server's greeting banner. +# You MUST specify $myhostname at the start due to an RFC requirement. +smtpd_banner = $myhostname ESMTP $mail_name (Debian) + +# IP protocols to use: ipv4, ipv6, or all +# (set this explicitly so `post-install upgrade-configuration' wont complain) +inet_protocols = all + +# List of "trusted" SMTP clients (maptype:mapname allowed) that have more +# privileges than "strangers". If mynetworks is not specified (the default), +# mynetworks_style is used to compute its value. +#mynetworks_style = class +#mynetworks_style = subnet +mynetworks_style = host +# +mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 + +# Uncomment the next line to generate "delayed mail" warnings +#delay_warning_time = 4h + +# List of domains (maptype:mapname allowed) that this machine considers +# itself the final destination for. +mydestination = $myhostname, sanctum, localhost.localdomain, localhost + +# Maximum size of a user mailbox +mailbox_size_limit = 0 + +# Optional external command to use instead of mailbox delivery. If set, +# you must set up an alias to forward root mail to a real user. +#mailbox_command = /usr/bin/procmail +#mailbox_command = /usr/bin/procmail -a "$EXTENSION" +mailbox_command = + +# List of alias maps to use to lookup local addresses. +# Per Debian Policy it should be /etc/aliases. +alias_maps = hash:/etc/aliases + +# List of alias maps to make indexes on, when running newaliases. +alias_database = hash:/etc/aliases + +# Notify (or not) local biff service when new mail arrives. +# Rarely used these days. +biff = no + +# Separator between user name and address extension (user+foo@domain) +#recipient_delimiter = + +recipient_delimiter = + + +# A host to send "other" mail to +#relayhost = $mydomain +#relayhost = [gateway.example.com] +#relayhost = [ip.add.re.ss]:port +#relayhost = uucphost +relayhost = + +# Where to look for Cyrus SASL configuration files. Upstream default is unset +# (use compiled-in SASL library default), Debian Policy says it should be +# /etc/postfix/sasl. +cyrus_sasl_config_path = /etc/postfix/sasl + +# SMTP server RSA key and certificate in PEM format +smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key +smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem +# SMTP Server security level: none|may|encrypt +smtpd_tls_security_level = may + +# List of CAs for SMTP Client to trust +# Prefer this over _CApath when smtp is running chrooted +smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt +# SMTP Client TLS security level: none|may|encrypt|... +smtp_tls_security_level = may +# SMTP Client TLS session cache +smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache +smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination +myhostname = sanctum +inet_interfaces = loopback-only +default_transport = error +relay_transport = error |
