postfix: manage_master_config: True master_config: enable_submission: False enable_service: True postgrey: enabled: True enable_service: True location: inet:172.16.0.5:6379 policyd-spf: enabled: True time_limit: 7200s config: smtpd_banner: $myhostname ESMTP $mail_name smtp_tls_CApath: /etc/ssl/certs biff: 'no' append_dot_mydomain: 'no' readme_directory: 'no' myhostname: localhost mydestination: localhost, localhost.localdomain relayhost: mynetworks: 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 mailbox_size_limit: 0 recipient_delimiter: + inet_interfaces: all # Alias alias_maps: hash:/etc/aliases alias_database: hash:/etc/aliases # Virtual users virtual_alias_maps: proxy:mysql:/etc/postfix/virtual_alias_maps.cf virtual_mailbox_domains: proxy:mysql:/etc/postfix/virtual_mailbox_domains.cf virtual_mailbox_maps: proxy:mysql:/etc/postfix/virtual_mailbox_maps.cf virtual_mailbox_base: /home/vmail virtual_mailbox_limit: 512000000 virtual_minimum_uid: 5000 virtual_transport: virtual virtual_uid_maps: static:5000 virtual_gid_maps: static:5000 local_transport: virtual local_recipient_maps: $virtual_mailbox_maps transport_maps: hash:/etc/postfix/transport # SMTP server smtpd_tls_session_cache_database: btree:${data_directory}/smtpd_scache smtpd_use_tls: 'yes' smtpd_sasl_auth_enable: 'yes' smtpd_sasl_type: dovecot smtpd_sasl_path: /var/run/dovecot/auth-client smtpd_recipient_restrictions: permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_relay_restrictions: permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_security_options: noanonymous smtpd_sasl_tls_security_options: $smtpd_sasl_security_options smtpd_tls_auth_only: 'yes' smtpd_sasl_local_domain: $mydomain smtpd_tls_loglevel: 1 smtpd_tls_session_cache_timeout: 3600s relay_domains: '$mydestination' # SMTP server certificate and key (from pillar data) smtpd_tls_cert_file: /etc/postfix/ssl/server-cert.crt smtpd_tls_key_file: /etc/postfix/ssl/server-cert.key # SMTP client smtp_tls_session_cache_database: btree:${data_directory}/smtp_scache smtp_use_tls: 'yes' smtp_tls_cert_file: /etc/postfix/ssl/example.com-relay-client-cert.crt smtp_tls_key_file: /etc/postfix/ssl/example.com-relay-client-cert.key smtp_sasl_password_maps: hash:/etc/postfix/sasl_passwd sender_canonical_maps: hash:/etc/postfix/sender_canonical relay_recipient_maps: hash:/etc/postfix/relay_domains virtual_alias_maps: hash:/etc/postfix/virtual transport: DOMAIN_NAME: ':[IP_ADDRESS]' vmail: user: postfix_user password: DB_PASSWD hosts: DB_HOST dbname: postfix_db certificates: server-cert: public_cert: | -----BEGIN CERTIFICATE----- (Your primary SSL certificate: smtp.example.com.crt) -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- (Your intermediate certificate: example-ca.crt) -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- (Your root certificate: trusted-root.crt) -----END CERTIFICATE----- private_key: | -----BEGIN RSA PRIVATE KEY----- (Your Private key) -----END RSA PRIVATE KEY----- example.com-relay-client-cert: public_cert: | -----BEGIN CERTIFICATE----- (Your primary SSL certificate: smtp.example.com.crt) -----END CERTIFICATE----- private_key: | -----BEGIN RSA PRIVATE KEY----- (Your Private key) -----END RSA PRIVATE KEY----- mapping: smtp_sasl_password_maps: - smtp.example.com: myaccount:somepassword sender_canonical_maps: - root: servers@example.com - nagios: alerts@example.com relay_recipient_maps: - example.com: OK virtual_alias_maps: - groupaliasexample: - someuser_1@example.com - someuser_2@example.com - singlealiasexample: someuser_3@example.com