myhostname={{ mail_main_domain }}

smptd_tls_cert_file={{ acme_certificates_directory }}/{{ mail_main_domain }}.crt
smptd_tls_key_file={{ acme_certificates_directory }}/{{ mail_main_domain }}.key
smtpd_tls_security_level=may
smtpd_tls_auth_only=yes

smtp_tls_security_level=may

smtpd_sasl_type=dovecot
smtpd_sasl_path=private/auth
smtpd_sasl_auth_enable=yes

virtual_mailbox_domains=mysql:{{ mail_postfix_configuration_directory }}/mysql-virtual-mailbox-domains.cf
virtual_mailbox_maps=mysql:{{ mail_postfix_configuration_directory }}/mysql-virtual-mailbox-maps.cf
virtual_alias_maps=mysql:{{ mail_postfix_configuration_directory }}/mysql-virtual-alias-maps.cf

virtual_transport=lmtp:unix:private/dovecot-lmtp

smtpd_client_restrictions =
  permit_mynetworks
  permit_sasl_authenticated
  reject_unknown_reverse_client_hostname

smtpd_helo_restrictions =
  permit_mynetworks
  permit_sasl_authenticated
  reject_invalid_helo_hostname
  reject_non_fqdn_helo_hostname
  reject_unknown_helo_hostname
smtpd_helo_required=yes

smtpd_sender_login_maps=
  mysql:{{ mail_postfix_configuration_directory }}/mysql-virtual-mailbox-domains.cf
  mysql:{{ mail_postfix_configuration_directory }}/mysql-virtual-alias-maps.cf

smtpd_sender_restrictions =
  reject_non_fqdn_sender
  reject_sender_login_mismatch
  reject_unknown_sender_domain

smtpd_relay_restrictions =
  permit_sasl_authenticated
  reject_unauth_destination

smtpd_recipient_restrictions =
  reject_non_fqdn_recipient
  reject_unknown_recipient_domain
  reject_unauth_pipelining

message_size_limit={{ mail_postfix_message_size_limit }}

smtpd_milters=inet:127.0.0.1:11332
non_smtpd_milters=inet:127.0.0.1:11332
milter_mail_macros=i {mail_addr} {client_addr} {client_name} {auth_authen}