#
# configure as smarthost
#
myhostname = {LOCAL_HOSTNAME}
mydomain = {LOCAL_DOMAINNAME}

myorigin = $mydomain
mydestination = localhost localhost.$mydomain $myhostname $mydomain
mynetworks_style = subnet

relay_domains =
relayhost = [{SMARTHOST}]:{SMARTHOST_PORT}

#smtpd_tls_chain_files = /certs/privkey.pem, /certs/fullchain.pem
#smtpd_tls_mandatory_ciphers = high
#smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
#smtpd_tls_mandatory_protocols = >=TLSv1.2, <=TLSv1.3
#smtpd_tls_security_level = {LOCAL_ENCRYPTION}

smtp_tls_security_level = {SMARTHOST_ENCRYPTION}
smtp_tls_connection_reuse = yes
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt

smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = static:{SMARTHOST_USERNAME}:{SMARTHOST_PASSWORD}
smtp_sasl_security_options = noanonymous

header_size_limit = 4096000
relay_destination_concurrency_limit = 20

soft_bounce = no

maillog_file = /dev/stdout