# See /usr/share/postfix/main.cf.dist for a commented, more complete version

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# See http://www.postfix.org/COMPATIBILITY_README.html -- default to 3.6 on
# fresh installs.
compatibility_level = 3.6



# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_security_level=may

smtp_tls_CApath=/etc/ssl/certs
smtp_tls_security_level=may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache


smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination

alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = $myhostname, localhost, localhost.localdomain, localhost
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all


smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot

smtpd_sasl_path = inet:127.0.0.1:555
smtpd_sasl_authenticated_header = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
#smtpd_sender_restrictions = reject_unknown_sender_domain
smtpd_sender_restrictions = reject_unknown_sender_domain, reject_unknown_client

# logging
maillog_file = /var/log/postfix.log

# virtual delivery
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_mailbox_domains = hash:/etc/postfix/vdomains
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_mailbox_limit = 0
virtual_minimum_uid = 50001

# Run all virtual hosting as one user (UID 50001)
virtual_uid_maps = static:50001
virtual_gid_maps = static:50001

# autoresponder transport maps
transport_maps = hash:/etc/postfix/vtransport

# deliver via dovecot lmtp
virtual_transport = lmtp:unix:dovecot-lmtp

# spam filtering via rspamd
smtpd_milters = inet:localhost:11332 unix:srs_milter/srs_milter.sock unix:opendkim/opendkim.sock
non_smtpd_milters = $smtpd_milters

# skip mail without checks if something goes wrong
milter_default_action = accept

# pass local email through header check
header_checks = pcre:/etc/postfix/header_checks.pcre

# sni for customer domains
tls_server_sni_maps = hash:/etc/postfix/sslsni

strict_rfc821_envelopes = yes

# 100MB
message_size_limit = 102400000
myhostname = enhance01.hostingraja.org
myorigin = $myhostname
mydomain = $myhostname