##
# PKI information
#

pki lucifer.kyriasis.com certificate "/etc/smtpd/certs/lucifer.kyriasis.com.crt"
pki lucifer.kyriasis.com key "/etc/smtpd/certs/lucifer.kyriasis.com.key"


##
# Tables
#

# If you edit the file, you have to run "smtpctl update table users"
table users file:/etc/smtpd/users
table sendertable file:/etc/smtpd/senders


##
# Listen directives
#

listen on enp0s4 port 25  tls         pki lucifer.kyriasis.com auth-optional senders <sendertable> masquerade
listen on enp0s4 port 587 tls-require pki lucifer.kyriasis.com auth          senders <sendertable> masquerade
listen on enp0s4 port 465 smtps       pki lucifer.kyriasis.com auth          senders <sendertable> masquerade

listen on lo port 10029 tag DKIM-OUT

listen on localhost senders <sendertable> masquerade


##
# Relay for hosts we act as a backup for
#

accept from any                          \
       for domain "theos.kyriasis.com"   \
       relay backup lucifer.kyriasis.com


accept from any                          \
       for domain "the-tk.com"           \
       relay backup lucifer.kyriasis.com


##
# Incoming
#

# Handle emails directly to local domain
accept from any                          \
       for domain "lucifer.kyriasis.com" \
       deliver to mda "/usr/bin/maildrop -d %{user.username}"

# Handle incoming to top-level domains
accept from any                                 \
       for domain  { kyriasis.com, the-tk.com } \
           virtual <users>                      \
       deliver to mda "/usr/bin/maildrop -d %{user.username}"

# Handle local mail
accept from local \
       for local  \
       deliver to mda "/usr/bin/maildrop -d %{user.username}"


##
# Outgoing
#

accept tagged DKIM-OUT \
       for any         \
       relay

accept for any \
       relay via smtp://127.0.0.1:10028