2026-06-14 01:07:48 +08:00
|
|
|
compatibility_level = 3.6
|
|
|
|
|
myhostname = mail.example.com
|
|
|
|
|
myorigin = $myhostname
|
|
|
|
|
mydestination = localhost
|
|
|
|
|
inet_interfaces = all
|
|
|
|
|
inet_protocols = all
|
|
|
|
|
|
|
|
|
|
# SQLite maps read the same LanQin DB created by the Go API.
|
|
|
|
|
virtual_mailbox_domains = sqlite:/etc/postfix/sqlite-domains.cf
|
|
|
|
|
virtual_mailbox_maps = sqlite:/etc/postfix/sqlite-mailboxes.cf
|
|
|
|
|
virtual_alias_maps = sqlite:/etc/postfix/sqlite-aliases.cf
|
|
|
|
|
virtual_transport = lmtp:inet:dovecot:24
|
|
|
|
|
virtual_mailbox_base = /var/mail/vhosts
|
|
|
|
|
|
|
|
|
|
smtpd_banner = $myhostname ESMTP LanQin Email
|
|
|
|
|
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
|
|
|
|
|
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
|
|
|
|
|
|
|
|
|
|
# Submission auth via Dovecot.
|
|
|
|
|
smtpd_sasl_type = dovecot
|
|
|
|
|
smtpd_sasl_path = inet:dovecot:12345
|
|
|
|
|
smtpd_sasl_auth_enable = yes
|
2026-06-16 22:10:29 +08:00
|
|
|
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
|
|
|
|
|
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
|
2026-06-14 01:07:48 +08:00
|
|
|
smtpd_tls_security_level = may
|
|
|
|
|
smtp_tls_security_level = may
|
|
|
|
|
|
2026-06-15 23:41:21 +08:00
|
|
|
# Rspamd milter: DKIM signing + spam headers.
|
2026-06-14 01:07:48 +08:00
|
|
|
milter_protocol = 6
|
|
|
|
|
milter_default_action = accept
|
2026-06-15 23:41:21 +08:00
|
|
|
milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen}
|
|
|
|
|
smtpd_milters = inet:rspamd:11332
|
|
|
|
|
non_smtpd_milters = inet:rspamd:11332
|
