--- primary_mail_server: mail.example.org primary_mail_server_port: 587 mail_domains: - example.org - example.com mail_aliases: - local_name: postmaster mail: mailadmin@example.org mail_trusted_networks: - 127.0.0.0/8 - 192.168.1.0/24 mail_user: backup_mx mail_user_password: "{{ vault_backup_mx_user_password }}" # Keep this bare minimun to keep the backup MX functionality postfix_config: mydestination: 'localhost; localhost.localdomain' myhostname: "{{ ansible_hostname }}" mynetworks: "{{ mail_trusted_networks | join(' ') }}" smtpd_recipient_restrictions: 'permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination' relayhost: "{{ primary_mail_server }}" relay_domains: "$mydestination {{ mail_domains |join(' ') }}" relay_recipient_maps: '' virtual_alias_domains: '' virtual_mailbox_domains: ''