smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/ssl/private/mail.pem
smtpd_tls_cert_file = /etc/ssl/certs/mail.pem
smtpd_tls_CAfile = /etc/ssl/ca-cert.pem
smtp_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
tls_random_prng_update_period = 3600s