---

# additional altnames
profiles::pki::vault::alt_names:
  - in-mta.main.unkin.net

# base postfix configuration (passed to postfix class)
postfix::relayhost: 'direct'
postfix::myorigin: 'main.unkin.net'
postfix::mydestination: 'blank'
postfix::mynetworks: '127.0.0.0/8 [::1]/128'
postfix::mta: true
postfix::manage_aliases: true

# profile parameters for customization
profiles::postfix::gateway::myhostname: 'in-mta.main.unkin.net'

# postfix map content (templates)
profiles::postfix::gateway::relay_recipients_maps:
  '@main.unkin.net': 'OK'

profiles::postfix::gateway::relay_domains_maps:
  'main.unkin.net': 'OK'

profiles::postfix::gateway::postscreen_access_maps:
  '127.0.0.1/32': 'permit'
  '10.10.12.200/32': 'permit'

profiles::postfix::gateway::helo_access_maps:
  '.dynamic.': 'REJECT'
  '.dialup.': 'REJECT'
  'unknown': 'REJECT'
  'localhost': 'REJECT You are not localhost'

# postfix transports
postfix::transports:
  'main.unkin.net':
    ensure: present
    destination: 'relay'
    nexthop: 'ausyd1nxvm2120.main.unkin.net:25'

# postfix virtuals
postfix::virtuals:
  'root':
    ensure: present
    destination: 'ben@main.unkin.net'
  'postmaster':
    ensure: present
    destination: 'ben@main.unkin.net'
  'abuse':
    ensure: present
    destination: 'ben@main.unkin.net'