summaryrefslogtreecommitdiff
path: root/mail/postfix/main.cf
diff options
context:
space:
mode:
Diffstat (limited to 'mail/postfix/main.cf')
-rw-r--r--mail/postfix/main.cf34
1 files changed, 34 insertions, 0 deletions
diff --git a/mail/postfix/main.cf b/mail/postfix/main.cf
new file mode 100644
index 0000000..4098668
--- /dev/null
+++ b/mail/postfix/main.cf
@@ -0,0 +1,34 @@
+# Identity
+myhostname = hetzner.yyamashita.com
+mydomain = yyamashita.com
+myorigin = $myhostname
+append_dot_mydomain = no
+compatibility_level = 3.6
+
+# Accept connections from Docker internal networks only
+inet_interfaces = all
+inet_protocols = ipv4
+mynetworks = 127.0.0.0/8, 172.16.0.0/12, 10.0.0.0/8
+
+# No local delivery — relay only
+mydestination =
+local_recipient_maps =
+local_transport = error:local delivery disabled
+
+# Relay restrictions: only forward mail from internal networks
+smtpd_relay_restrictions = permit_mynetworks, reject
+smtpd_recipient_restrictions = permit_mynetworks, reject
+
+# Opportunistic TLS on outbound SMTP
+smtp_tls_security_level = may
+smtp_tls_loglevel = 1
+
+# DKIM signing via OpenDKIM milter on localhost:8891
+milter_default_action = accept
+milter_protocol = 6
+smtpd_milters = inet:localhost:8891
+non_smtpd_milters = inet:localhost:8891
+
+# Queue timeouts
+maximal_queue_lifetime = 1d
+bounce_queue_lifetime = 1d