comparison postfix/main.cf @ 0:e3de72cc63b9

I have no interest in an ordinary menu
author Shin'ya Minazuki <shinyoukai@laidback.moe>
date Mon, 10 Nov 2025 21:14:26 +0900
parents
children 007252fb6449
comparison
equal deleted inserted replaced
-1:000000000000 0:e3de72cc63b9
1 # See /usr/share/postfix/main.cf.dist for a commented, more complete version
2
3
4 # Debian specific: Specifying a file name will cause the first
5 # line of that file to be used as the name. The Debian default
6 # is /etc/mailname.
7 #myorigin = /etc/mailname
8
9 setgid_group = maildrop
10 smtpd_banner = $myhostname ESMTP $mail_name (NetBSD)
11 biff = no
12
13 # appending .domain is the MUA's job.
14 append_dot_mydomain = no
15
16 # Uncomment the next line to generate "delayed mail" warnings
17 #delay_warning_time = 4h
18
19 readme_directory = no
20
21 # See http://www.postfix.org/COMPATIBILITY_README.html -- default to 3.6 on
22 # fresh installs.
23 compatibility_level = 3.6
24
25
26
27 # TLS parameters
28 smtpd_tls_cert_file=/etc/letsencrypt/live/example.net/fullchain.pem
29 smtpd_tls_key_file=/etc/letsencrypt/live/example.net/privkey.pem
30 smtpd_tls_security_level=may
31
32 smtp_tls_CApath=/etc/openssl/certs
33 smtp_tls_security_level=may
34 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
35
36
37 smtpd_sasl_auth_enable = yes
38
39 smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination
40 smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, defer_unauth_destination
41 myhostname = mail.example.net
42 mydomain = example.net
43 myorigin = /etc/mailname
44 alias_maps = hash:/etc/mail/aliases
45 alias_database = hash:/etc/mail/aliases
46 mydestination = $myhostname, $mydomain, mail.example.net, localhost
47 relayhost =
48 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
49 home_mailbox = Maildir/
50 recipient_delimiter = +
51 inet_interfaces = all
52 inet_protocols = all
53 cyrus_sasl_config_path = /etc/sasl2
54 smtpd_sasl_local_domain = $myhostname
55 broken_sasl_auth_clients = yes
56 smtpd_sasl_security_options = noanonymous
57
58 smtpd_milters = inet:127.0.0.1:11332
59 milter_default_action = accept
60
61 smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, KRB5-DES, CBC3-SHA