# cert directories
pki rysite.me key "/etc/ssl/private/rysite.me.key"
pki rysite.me cert "/etc/ssl/rysite.me.cert"

# listen on local int and tag email with DKIM_OUT
listen on lo0
listen on lo0 port 10028 tag DKIM_OUT

# listen on smtp, smtps, sub on egress and req auth
listen on egress inet4 tls pki rysite.me auth-optional # MTA
listen on egress inet4 smtps pki rysite.me auth
listen on egress inet4 port submission tls-require pki rysite.me # MSA

# aliases
table aliases db:/etc/mail/aliases.db

# actions
action dovecot lmtp "/var/dovecot/lmtp" alias <aliases>
action add_dkim relay host smtp://127.0.0.1:10027
action "relay" relay
action dovecot_deliver maildir "~/mbox"

match from any for domain "rysite.me" action dovecot
match tag DKIM_OUT for any action "relay"
match from local for any action add_dkim
match auth from any for any action add_dkim