queue compression
queue encryption ab045b9720d3d0604d75a7651298dde2
smtp max-message-size 100M
mda wrapper antispam "/usr/local/bin/rspamc -h /var/run/rspamd/rspamd.sock -t 120 --mime -e '%{mda}'"

pki test.nsas.de key "/etc/mail/ssl/nsas.de.key"
pki test.nsas.de cert "/etc/mail/ssl/nsas.de.crt"

table aliases file:/etc/mail/aliases
table secrets file:/etc/mail/secret
table vdomains { test.nsas.de }


listen on lo0
listen on lo0 port 10026 tag SPAM_IN
listen on lo0 port 10028 tag DKIM
listen on egress tls pki test.nsas.de auth
listen on egress port submission hostname test.nsas.de tls-require pki test.nsas.de auth mask-source

action "mbox"                           mbox    alias <aliases> wrapper "antispam"
action "relay"                          relay
action "relay_lekker"               relay       host smtp://52.58.132.77
action "relay_dkim"                 relay       host smtp://127.0.0.1:10027
action "relay_to_public_smtp"   relay   host smtp+tls://label@smtp.nsas.de:587 auth <secrets>
action "relay_to_spamassasin"   relay   host smtp://localhost:10025

match for local action "dovecot"
match tag DKiM for any action "relay"
match from any for local action "relay_to_spamassasin"
match from local for any action "relay_dkim"
match from any auth for any action "relay_dkim"