alias_database = hash:/etc/aliases
    alias_maps = hash:/etc/aliases
    append_dot_mydomain = no
    biff = no
    broken_sasl_auth_clients = yes
    config_directory = /etc/postfix
    content_filter = amavis:[127.0.0.1]:10024
    dovecot_destination_recipient_limit = 1
    html_directory = /usr/share/doc/postfix/html
    inet_interfaces = all
    inet_protocols = ipv4
    mailbox_size_limit = 0
    mailman_destination_recipient_limit = 1
    message_size_limit = 102400000
    mydestination = localhost.localdomain, localhost, $myhostname
    mydomain = domain.tld
    myhostname = host.domain.tld
    mynetworks = 127.0.0.0/8, 10.77.7.0/24
    myorigin = /etc/mailname
    readme_directory = /usr/share/doc/postfix
    receive_override_options = no_address_mappings
    recipient_delimiter = +
    relay_domains = $mydestination, mysql:/etc/postfix/mysql-relay-domains.cf
    relay_recipient_maps = mysql:/etc/postfix/mysql-relay-recipient-maps.cf, hash:/etc/postfix/relay_recipients_christoph
    relayhost =
    smtp_connect_timeout = 180s
    smtp_sasl_auth_enable = yes
    smtp_sasl_password_maps = hash:/etc/postfix/sasl_client_passwd
    smtp_sasl_security_options = noplaintext, noanonymous
    smtp_sasl_tls_security_options = noanonymous
    smtp_tls_cert_file = /etc/ssl/xyzssl/name.chain.cert
    smtp_tls_key_file = /etc/ssl/xyzssl/name.key
    smtp_tls_security_level = may
    smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
    smtpd_client_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/client-access permit_sasl_authenticated, reject_unknown_client_hostname, permit
    smtpd_helo_required = yes
    smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname
    smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access hash:/etc/postfix/recipient-access, reject_unauth_destination, reject_non_fqdn_recipient, permit_auth_destination
    smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access hash:/etc/postfix/recipient-access, reject_unauth_destination, reject_non_fqdn_recipient, permit_auth_destination
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_sasl_path = private/auth
    smtpd_sasl_security_options = noanonymous, noplaintext
    smtpd_sasl_tls_security_options = noanonymous
    smtpd_sasl_type = dovecot
    smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, permit
    smtpd_tls_auth_only = yes
    smtpd_tls_cert_file = /etc/ssl/xyzssl/name.chain.cert
    smtpd_tls_key_file = /etc/ssl/xyzssl/name.key
    smtpd_tls_security_level = may
    transport_maps = mysql:/etc/postfix/mysql-transport-maps.cf
    virtual_alias_domains =
    virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf
    virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
    virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
    virtual_transport = dovecot