blob: 4066839ec9c0c583b52679d540723f76ad39f205 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
# Identity
myhostname = hetzner.yyamashita.com
mydomain = yyamashita.com
myorigin = $myhostname
append_dot_mydomain = no
compatibility_level = 3.6
# Accept connections from Docker internal networks only
inet_interfaces = all
inet_protocols = ipv4
mynetworks = 127.0.0.0/8, 172.16.0.0/12, 10.0.0.0/8
# No local delivery — relay only
mydestination =
local_recipient_maps =
local_transport = error:local delivery disabled
# Relay restrictions: only forward mail from internal networks
smtpd_relay_restrictions = permit_mynetworks, reject
smtpd_recipient_restrictions = permit_mynetworks, reject
# Relay via Amazon SES (port 25 outbound is blocked by Hetzner)
relayhost = [email-smtp.us-east-1.amazonaws.com]:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_tls_security_level = encrypt
smtp_tls_loglevel = 1
# DKIM signing via OpenDKIM milter on localhost:8891
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = inet:127.0.0.1:8891
# Queue timeouts
maximal_queue_lifetime = 1d
bounce_queue_lifetime = 1d
|
