summaryrefslogtreecommitdiffstats
path: root/lucifer.kyriasis.com/smtpd.conf
blob: 2db7f99ef38d554cb5557a139a35df64ec0af286 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
##
# PKI information
#

pki lucifer.kyriasis.com certificate "/etc/smtpd/certs/lucifer.kyriasis.com.crt"
pki lucifer.kyriasis.com key "/etc/smtpd/certs/lucifer.kyriasis.com.key"


##
# Tables
#

# If you edit the file, you have to run "smtpctl update table users"
table users file:/etc/smtpd/users
table sendertable file:/etc/smtpd/senders


##
# Listen directives
#

listen on enp0s4 port 25  tls         pki lucifer.kyriasis.com auth-optional senders <sendertable> masquerade
listen on enp0s4 port 587 tls-require pki lucifer.kyriasis.com auth          senders <sendertable> masquerade
listen on enp0s4 port 465 smtps       pki lucifer.kyriasis.com auth          senders <sendertable> masquerade

listen on lo port 10029 tag DKIM-OUT

listen on localhost senders <sendertable> masquerade


##
# Relay for hosts we act as a backup for
#

accept from any                          \
       for domain "theos.kyriasis.com"   \
       relay backup lucifer.kyriasis.com


accept from any                          \
       for domain "the-tk.com"           \
       relay backup lucifer.kyriasis.com


##
# Incoming
#

# Handle emails directly to local domain
accept from any                          \
       for domain "lucifer.kyriasis.com" \
       deliver to mda "/usr/bin/maildrop -d %{user.username}"

# Handle incoming to top-level domains
accept from any                                 \
       for domain  { kyriasis.com, the-tk.com } \
           virtual <users>                      \
       deliver to mda "/usr/bin/maildrop -d %{user.username}"

# Handle local mail
accept from local \
       for local  \
       deliver to mda "/usr/bin/maildrop -d %{user.username}"


##
# Outgoing
#

accept tagged DKIM-OUT \
       for any         \
       relay

accept for any \
       relay via smtp://127.0.0.1:10028