# ============================
# Minimal master.cf (safe baseline)
# Generated: 2025-09-29
# Target: Ubuntu/Debian with Postfix 3.x
# ============================

# --- Inbound listeners ---
smtp      inet  n       -       n       -       -       smtpd

# Client submission (STARTTLS on 587) — SASL bisa diaktifkan nanti

# SMTPS (implicit TLS on 465) — SASL bisa diaktifkan nanti

# --- Core queue services ---
submission inet  n       -       n       -       -       smtpd
    -o syslog_name=postfix/submission
    -o smtpd_tls_security_level=encrypt
    -o smtpd_sasl_auth_enable=yes
smtps      inet  n       -       n       -       -       smtpd
    -o syslog_name=postfix/smtps
    -o smtpd_tls_wrappermode=yes
    -o smtpd_sasl_auth_enable=yes
pickup    unix  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr

# --- TLS, rewrite, misc ---
tlsmgr    unix  -       -       n       -       1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
scache    unix  -       -       n       -       1       scache
anvil     unix  -       -       n       -       1       anvil

# --- Outbound SMTP (delivery) ---
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp

# --- Local deliveries ---
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp       unix  -       -       n       -       -       lmtp