opensmtpd:
  pki:
    theos.kyriasis.com:
      certificate: /etc/smtpd/certs/fullchain.pem
      key: /etc/smtpd/certs/privkey.pem


  tables:
    users:
      type: file
      path: /etc/smtpd/users
      contents:
        - 'erik: sysbunny@lucifer.kyriasis.com'
        - 'sysbunny: sysbunny@lucifer.kyriasis.com'
        - 'dellsama: sysbunny@lucifer.kyriasis.com'

        - 'tomasz.kramkowski: kyriasis-redirect@the-tk.com'
        - 'tk: kyriasis-redirect@the-tk.com'

        - 'grawity: grawity@theos.kyriasis.com'

        - 'halosghost: halosghost@theos.kyriasis.com'

        - 'kyrias: kyrias@theos.kyriasis.com'
        - 'johannes: kyrias@theos.kyriasis.com'

        - 'xan: xanadu@theos.kyriasis.com'
        - 'xanadu: xanadu@theos.kyriasis.com'
        - 'maus: xanadu@theos.kyriasis.com'

        - '@kyriasis.com: kyrias@theos.kyriasis.com'
        - '@lists.kyriasis.com: lists@theos.kyriasis.com'
        - '@remmy.foo: kyrias@theos.kyriasis.com'

    sendertable:
      type: file
      path: /etc/smtpd/senders
      contents:
        - 'sysbunny: @lucifer.kyriasis.com,sysbunny@kyriasis.com,erik@kyriasis.com'
        - 'grawity: grawity@theos.kyriasis.com,grawity@kyriasis.com'
        - 'halosghost: halosghost@theos.kyriasis.com,halosghost@kyriasis.com'
        - 'kyrias: @theos.kyriasis.com,@kyriasis.com,@remmy.foo'
        - 'xanadu: xan@kyriasis.com,xanadu@kyriasis.com'

  listeners:
    - interface: enp0s3
      port: 25
      tls: True
      pki: theos.kyriasis.com
      auth-optional: True
      senders: <sendertable> masquerade

    - interface: enp0s3
      port: 587
      tls-require: True
      pki: theos.kyriasis.com
      auth: True
      senders: <sendertable> masquerade

    - interface: enp0s3
      port: 465
      smtps: True
      pki: theos.kyriasis.com
      auth: True
      senders: <sendertable> masquerade

    - interface: lo
      port: 10029
      tag: DKIM-OUT

    - interface: lo
      port: 10031
      tag: SpamAssassin

    - interface: localhost
      senders: <sendertable> masquerade


  rules:
    - backup for lucifer:
        type: accept
        from: any
        for: domain "lucifer.kyriasis.com"
        relay: backup theos.kyriasis.com

    - incoming to local host:
        type: accept
        tagged: SpamAssassin
        for: domain "theos.kyriasis.com" alias { root = kyrias }
        deliver_to: lmtp "/var/run/dovecot/lmtp"

    - incoming mailinglists:
        type: accept
        tagged: SpamAssassin
        for: domain "lists.kyriasis.com" virtual { "@lists.kyriasis.com" = lists }
        deliver_to: mda "/usr/local/bin/mlmmj-receive -L /home/lists/spool/%{dest.user:strip}/"

    - incoming to top-level domains:
        type: accept
        tagged: SpamAssassin
        for: 'domain { kyriasis.com, remmy.foo } virtual <users>'
        deliver_to: lmtp "/var/run/dovecot/lmtp"

    - relay incoming through dkimproxy:
        type: accept
        from: any
        for: domain { kyriasis.com, theos.kyriasis.com, lists.kyriasis.com, remmy.foo }
        relay: via smtp://127.0.0.1:10025

    - outgoing from dkimproxy:
        type: accept
        tagged: DKIM-OUT
        for: any
        relay: True

    - outgoing to dkimproxy:
        type: accept
        for: any
        relay: via smtp://127.0.0.1:10028