postfix:
  master_config:
    services:
      smtp:
        enable: False
  config:
    # to-do: set via site config
    relayhost: zz0.email
    myhostname: {{ grains['fqdn'] }}
    inet_interfaces: loopback-only
    # to-do: support relay via IPv6
    inet_protocols: ipv4
    alias_maps: lmdb:/etc/aliases
    smtpd_use_tls: 'no'
    smtp_use_tls: 'yes'
    smtp_tls_security_level: encrypt
    smtp_tls_wrappermode: 'yes'