#!/bin/bash

#postconf -M submission/inet
#postconf -P -h submission/inet/milter_macro_daemon_name
#postconf -P -h submission/inet/smtpd_client_restrictions
#postconf -P -h submission/inet/smtpd_sasl_auth_enable
#postconf -P -h submission/inet/smtpd_tls_security_level
#postconf -P -h submission/inet/syslog_name

{{ if eq (getv "/submission/enable") "yes"}}
postconf -M submission/inet="submission inet n - n - - smtpd"
postconf -F submission/inet/private=n \
	 submission/inet/unprivileged=- \
	 submission/inet/chroot=n submission/inet/wakeup=- \
	 submission/inet/process_limit=- \
	 submission/inet/command="smtpd"
postconf -P -e submission/inet/milter_macro_daemon_name="ORIGINATING"
postconf -P -e submission/inet/smtpd_client_restrictions="permit_sasl_authenticated,reject"
postconf -P -e submission/inet/smtpd_helo_restrictions="permit"
postconf -P -e submission/inet/smtpd_sasl_auth_enable="yes"
postconf -P -e submission/inet/smtpd_tls_security_level="encrypt"
postconf -P -e submission/inet/syslog_name="postfix/submission"
{{ else }}
postconf -M# submission/inet
{{ end }}