# ---- postfix / TLS ---------------------------------------------------

This is a work in progress.


# ---- certificate configuration ---------------------------------------



# ---- postfix configuration -------------------------------------------

---- begin postfix smtpd TLS configuration ----

  smtpd_use_tls                     = yes
  smtpd_tls_auth_only               = yes
  smtpd_tls_CAfile                  = /home/extremis/ssl/smtp.extremis.net-ca.pem
  smtpd_tls_cert_file               = /home/extremis/ssl/smtp.extremis.net-certificate.pem
  smtpd_tls_key_file                = /home/extremis/ssl/smtp.extremis.net-key.pem
  smtpd_tls_loglevel                = 3
  smtpd_tls_received_header         = yes
  smtpd_tls_session_cache_timeout	= 3600s

---- end postfix smtpd TLS configuration ----


---- begin postfix smtpd SASL configuration ----

  smtpd_sasl_auth_enable            = yes
  smtpd_sasl_security_options       = noanonymous
  smtpd_sasl_tls_security_options	= $smtpd_sasl_security_options
  smtpd_sasl_local_domain           =
  smtpd_recipient_restrictions      = permit_sasl_authenticated, permit_mynetworks, check_relay_domains
  broken_sasl_auth_clients          = yes

---- end postfix smtpd SASL configuration ----


# ---- feedback --------------------------------------------------------

Please send any and all comments to gjvc at gjvc dot com.  Thank you.