summaryrefslogtreecommitdiff
path: root/mail/postfix/main.cf
diff options
context:
space:
mode:
authoryyamashita <yyamashita@hetzner.yyamashita.com>2026-06-09 01:34:02 +0900
committeryyamashita <yyamashita@hetzner.yyamashita.com>2026-06-09 01:34:02 +0900
commit733ae6e5c4362aa85d54cb7b0674483d3f6862cd (patch)
tree20f311ef697b06e46c91b0a55a6e4e11395b1583 /mail/postfix/main.cf
parent72ff02cf231c60314ca4557c576f513088830e40 (diff)
Switch mail container from SES relay to direct delivery
Port 25 outbound is no longer blocked on Hetzner, so SES relay is unnecessary. Remove relayhost, SASL auth config, and libsasl2-modules. Postfix now delivers directly to recipient MX; inet_protocols=ipv4 already present to avoid IPv6 PTR issues. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'mail/postfix/main.cf')
-rw-r--r--mail/postfix/main.cf8
1 files changed, 2 insertions, 6 deletions
diff --git a/mail/postfix/main.cf b/mail/postfix/main.cf
index 4066839..0684ffb 100644
--- a/mail/postfix/main.cf
+++ b/mail/postfix/main.cf
@@ -19,12 +19,8 @@ local_transport = error:local delivery disabled
smtpd_relay_restrictions = permit_mynetworks, reject
smtpd_recipient_restrictions = permit_mynetworks, reject
-# Relay via Amazon SES (port 25 outbound is blocked by Hetzner)
-relayhost = [email-smtp.us-east-1.amazonaws.com]:587
-smtp_sasl_auth_enable = yes
-smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
-smtp_sasl_security_options = noanonymous
-smtp_tls_security_level = encrypt
+# Direct delivery (no relay)
+smtp_tls_security_level = may
smtp_tls_loglevel = 1
# DKIM signing via OpenDKIM milter on localhost:8891