smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_delay_reject = yes
smtpd_client_restrictions = permit_sasl_authenticated
smtpd_recipient_restrictions = permit_sasl_authenticated
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, check_relay_domains

smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /usr/local/etc/postfix/cert/host.cert.key
smtpd_tls_cert_file = /usr/local/etc/postfix/cert/host.cert.cert
smtpd_tls_CAfile = /usr/local/etc/postfix/cert/privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom