# Identity
myhostname = hetzner.yyamashita.com
mydomain = yyamashita.com
myorigin = $myhostname
append_dot_mydomain = no
compatibility_level = 3.6

# Accept connections from Docker internal networks only
inet_interfaces = all
inet_protocols = ipv4
mynetworks = 127.0.0.0/8, 172.16.0.0/12, 10.0.0.0/8

# No local delivery — relay only
mydestination =
local_recipient_maps =
local_transport = error:local delivery disabled

# Relay restrictions: only forward mail from internal networks
smtpd_relay_restrictions = permit_mynetworks, reject
smtpd_recipient_restrictions = permit_mynetworks, reject

# Direct delivery (no relay)
smtp_tls_security_level = may
smtp_tls_loglevel = 1

# DKIM signing via OpenDKIM milter on localhost:8891
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = inet:127.0.0.1:8891

# Queue timeouts
maximal_queue_lifetime = 1d
bounce_queue_lifetime = 1d