Postfix
=======

Use this role to setup a Postfix mail server. It comes with the following additions:
- [Mail-TLS-Helper](https://github.com/systemli/mail-tls-helper)
- [MTA-STS-Resolver](https://github.com/Snawoot/postfix-mta-sts-resolver)
- Fail2ban
- optional: [OnionMX](https://github.com/ehloonion/onionmx)
- optional: Unbound


## Variables

### Scope: misc

| Variable | Value | Default | Note |
|--|--|--|--|
| `unbound_install` | bool | | `True` if you whish to install unbound |
| `postfix_onionmx` | bool | | `True` to setup OnionMX delivery |
| `postfix_mydestination` | List | | List with hostnames |
| `postfix_mynetworks` | List | | List with network addresses |

### Scope: submission

| Variable | Value | Default | Note |
|--|--|--|--|
| `postfix_submission` | bool | | Set `True` to configure submission port settings |
| `postfix_submission_smtpd_tls_cert_file` | string |  |Path to TLS cert file |
| `postfix_submission_smtpd_tls_key_file` | string | | Path to TLS key file |
| `postfix_submission_non_tls_port` | int | | Port number for an additional (internal) submission port without TLS |