relayhost settings, add ca-certificates package

confd/conf.d/setup_relayhost.toml

@@ -0,0 +1,15 @@
+[template]
+src = "setup_relayhost.tmpl"
+dest = "/start.d/setup_relayhost"
+mode = "0755"
+keys = [
+"/relayhost",
+"/smtp/sasl/auth/enable",
+"/smtp/sasl/password/maps",
+"/smtp/sasl/security/options",
+"/smtp/tls/cafile",
+"/smtp/tls/mandatory/protocols",
+"/smtp/tls/note/starttls/offer",
+"/smtp/tls/security/level",
+"/smtp/tls/session/cache/database"
+]

confd/templates/setup_relayhost.tmpl

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+# These postfix settings allow for sending all mail through a relay host.
+
+{{ with getv "/relayhost" }}postconf relayhost='{{.}}'{{ end }}
+{{ with getv "/smtp/sasl/auth/enable" }}postconf smtp_sasl_auth_enable='{{.}}'{{ end }}
+{{ with getv "/smtp/sasl/password/maps" }}postconf smtp_sasl_password_maps='{{.}}'{{ end }}
+{{ with getv "/smtp/sasl/security/options" }}postconf smtp_sasl_security_options='{{.}}'{{ end }}
+{{ with getv "/smtp/tls/cafile" }}postconf smtp_tls_CAfile='{{.}}'{{ end }}
+{{ with getv "/smtp/tls/mandatory/protocols" }}postconf smtp_tls_mandatory_protocols='{{.}}'{{ end }}
+{{ with getv "/smtp/tls/note/starttls/offer" }}postconf smtp_tls_note_starttls_offer='{{.}}'{{ end }}
+{{ with getv "/smtp/tls/security/level" }}postconf smtp_tls_security_level='{{.}}'{{ end }}
+{{ with getv "/smtp/tls/session/cache/database" }}postconf smtp_tls_session_cache_database='{{.}}'{{ end }}