# Lookup 
domain = {{ domain }}
server_host = {{ postfix_ldap_server }}
server_port = {{ postfix_ldap_port }}
version = {{ postfix_ldap_version }}
scope = {{ postfix_ldap_scope }}
bind = {{ 'yes' if postfix_ldap_bind else 'no' }}
bind_dn = {{ postfix_ldap_bind_dn }}
bind_pw = {{ postfix_ldap_bind_pw }}
start_tls = {{ 'yes' if postfix_ldap_start_tls else 'no' }}
tls_ca_cert_file = {{ postfix_ldap_tls_ca_cert_file }}
tls_ca_cert_dir = {{ postfix_ldap_tls_ca_cert_dir }}
{% if item == 'user' %}
search_base = {{ postfix_mail_domains[domain][item+'_lookup'].search_base
  | default( 'ou=People,'+domain.split('.') | map('regex_replace','^','dc=')
    | join( ',' ) ) }}
query_filter = {{ postfix_mail_domains[domain][item+'_lookup'].query_filter
  | default( '(&(objectClass=inetOrgPerson)(uid=%u))' ) }}
result_attribute = {{ postfix_mail_domains[domain].user_lookup.result_attribute
  | default('uid') }}
result_format = {{ postfix_mail_home }}/{{ domain }}/%s/
{% endif %}
{% if item == 'alias' %}
search_base = {{ postfix_mail_domains[domain].alias_lookup.search_base
  | default( 'ou=Alias,'+domain.split('.') | map('regex_replace','^','dc=')
    | join( ',' ) ) }}
query_filter = {{ postfix_mail_domains[domain].alias_lookup.query_filter
  | default( '(&(objectClass=nisMailAlias)(cn=%u))' ) }}
result_attribute = {{ postfix_mail_domains[domain].user_lookup.result_attribute
  | default('rfc822MailMember') }}
result_format = {{ postfix_mail_domains[domain].user_lookup.result_format
  | default('%s') }}
{% endif %}
{% if item == 'group' %}
search_base = {{ postfix_mail_domains[domain].group_lookup.search_base
  | default( 'ou=Group,'+domain.split('.') | map('regex_replace','^','dc=')
    | join( ',' ) ) }}
query_filter = {{ postfix_mail_domains[domain].group_lookup.query_filter
  | default( '(&(objectClass=posixGroup)(cn=%u))' ) }}
result_attribute = {{ postfix_mail_domains[domain].user_lookup.result_attribute
  | default('memberUid') }}
result_format = {{ postfix_mail_domains[domain].user_lookup.result_format
  | default('%s@'+domain) }}
{% endif %}

# para sqlite
# dbpath = /etc/postfix/{{ domain }}_users.sqlite
# query = {{ postfix_sqlite_user_query }}

# queda por configurar estos params
# 'timeout',
# 'special_result_attribute',
# 'terminal_result_attribute',
# 'leaf_result_attribute',
# 'recursion_limit',
# 'expansion_limit',
# 'size_limit',
# 'dereference',
# 'chase_referrals',
# 'debuglevel',
# 'sasl_mechs',
# 'sasl_realm',
# 'sasl_authz_id',
# 'sasl_minssf',
# 'tls_cert',
# 'tls_key',
# 'tls_require_cert',
# 'tls_random_file',
# 'tls_cipher_suite',