# See smtpd.conf(5) for more information.
# To accept external mail, replace with: listen on all
#
# Les certificats

pki "cert_mail" cert "/etc/ssl/__DOMAIN__.crt"
pki "cert_mail" key "/etc/ssl/private/__DOMAIN__.key"

table aliases file:/etc/mail/aliases
table passwd file:/etc/mail/passwd
table virtuals file:/etc/mail/virtuals

filter "rspamd" proc-exec "filter-rspamd"
filter "dkimsign" proc-exec "filter-dkimsign -d __DOMAIN__ -s dkim -k /etc/mail/dkim/__DOMAIN__-private.key" user _dkimsign group _dkimsign

# Activation du check du reverse DNS
#filter check_rdns phase connect match !rdns disconnect "550 no rDNS available"
#filter check_fcrdns phase connect match !fcrdns disconnect "550 no FCrDNS available"

listen on all tls pki "cert_mail" hostname "__DOMAIN__" filter  rspamd
listen on all port submission tls-require pki "cert_mail" auth <passwd> filter dkimsign

action "local_mail" mbox alias <aliases>
action "domain_mail" maildir "/var/vmail/__DOMAIN__/%{dest.user:lowercase}" virtual <virtuals>
action "outbound" relay


match from any for domain "__DOMAIN__" action "domain_mail"
match from local for local action "local_mail"

match auth from any for any action "outbound"