Fix edge postfix gateway config for unkin.net

hieradata/nodes/aumel1nxvm2132.main.unkin.net.yaml

@@ -0,0 +1,2 @@
+---
+profiles::postfix::gateway::myhostname: 'mta2.edge.unkin.net'

hieradata/nodes/ausyd2nxvm2130.main.unkin.net.yaml

@@ -0,0 +1,2 @@
+---
+profiles::postfix::gateway::myhostname: 'mta1.edge.unkin.net'

hieradata/roles/infra/mail/gateway.yaml

@@ -1,26 +1,19 @@
 ---
 
-# additional altnames
-profiles::pki::vault::alt_names:
-  - in-mta.main.unkin.net
-
 # base postfix configuration (passed to postfix class)
 postfix::relayhost: 'direct'
-postfix::myorigin: 'main.unkin.net'
+postfix::myorigin: 'unkin.net'
 postfix::mydestination: 'blank'
-postfix::mynetworks: '127.0.0.0/8 [::1]/128'
+postfix::mynetworks: '127.0.0.0/8 [::1]/128 103.216.191.185/32'
 postfix::mta: true
 postfix::manage_aliases: true
 
-# profile parameters for customization
-profiles::postfix::gateway::myhostname: 'in-mta.main.unkin.net'
-
 # postfix map content (templates)
 profiles::postfix::gateway::relay_recipients_maps:
-  '@main.unkin.net': 'OK'
+  '@unkin.net': 'OK'
 
 profiles::postfix::gateway::relay_domains_maps:
-  'main.unkin.net': 'OK'
+  'unkin.net': 'OK'
 
 profiles::postfix::gateway::postscreen_access_maps:
   '127.0.0.1/32': 'permit'
@@ -32,21 +25,24 @@ profiles::postfix::gateway::helo_access_maps:
   'unknown': 'REJECT'
   'localhost': 'REJECT You are not localhost'
 
+profiles::postfix::gateway::smtp_tls_policy_maps:
+  '[mail-in.main.unkin.net]:25': 'secure match=hostname'
+
 # postfix transports
 postfix::transports:
-  'main.unkin.net':
+  'unkin.net':
     ensure: present
     destination: 'relay'
-    nexthop: 'mail-in.main.unkin.net:25'
+    nexthop: '[mail-in.main.unkin.net]:25'
 
 # postfix virtuals
 postfix::virtuals:
   'root':
     ensure: present
-    destination: 'ben@main.unkin.net'
+    destination: 'ben@unkin.net'
   'postmaster':
     ensure: present
-    destination: 'ben@main.unkin.net'
+    destination: 'ben@unkin.net'
   'abuse':
     ensure: present
-    destination: 'ben@main.unkin.net'
+    destination: 'ben@unkin.net'