From: Christian Heller <c.heller@plomlompom.de>
Date: Wed, 28 Nov 2018 01:25:49 +0000 (+0100)
Subject: WIP.
X-Git-Url: https://plomlompom.com/repos/%7B%7Bprefix%7D%7D/%7B%7B%20web_path%20%7D%7D/static/%7B%7Bdb.prefix%7D%7D/tasks?a=commitdiff_plain;h=25a502e9d0d66e0ca5b391436faa6becf958cc1e;p=config

WIP.
---

diff --git a/all_new_2018/linkable_etc_files/sendonly/etc/postfix/main.cf b/all_new_2018/linkable_etc_files/sendonly/etc/postfix/main.cf
index 39d3720..d081783 100644
--- a/all_new_2018/linkable_etc_files/sendonly/etc/postfix/main.cf
+++ b/all_new_2018/linkable_etc_files/sendonly/etc/postfix/main.cf
@@ -21,33 +21,18 @@ readme_directory = no
 # fresh installs.
 compatibility_level = 2
 
-# TLS parameters (excluding smtpd_tls_(cert|key)_file for own adaption below)
-smtpd_use_tls=yes
-smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
-smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
-
 # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
 # information on enabling SSL in the smtp client.
 
 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
 myorigin = /etc/mailname
-myhostname = REPLACE_myhostname_ECALPER
+myhostname = $myorigin
 alias_maps = hash:/etc/aliases
 alias_database = hash:/etc/aliases
-mydestination = $myhostname localhost.$mydomain localhost REPLACE_mydomain_if_domainwide_ECALPER
+mydestination = $myhostname localhost.$mydomain localhost
 relayhost = 
 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
 mailbox_size_limit = 0
 recipient_delimiter = +
-inet_interfaces = all
-inet_protocols = all
-
-# plomlompom-specific adaptions to allow TLS and SASL via LetsEncrypt/Dovecot.
-smtpd_tls_cert_file=/etc/letsencrypt/live/${myhostname}/fullchain.pem
-smtpd_tls_key_file=/etc/letsencrypt/live/${myhostname}/privkey.pem
-smtpd_sasl_type = dovecot
-smtpd_sasl_path = private/auth
-
-# connect to opendkim
-smtpd_milters = inet:localhost:12301
-non_smtpd_milters = inet:localhost:12301
\ No newline at end of file
+inet_interfaces = loopback-only
+inet_protocols = all
\ No newline at end of file