class mail::tls {
# TLS
- postfix::config { "smtpd_tls_cert_file": value => '/etc/ssl/certs/cert.crt' }
- postfix::config { "smtpd_tls_key_file": value => '/etc/ssl/private/cert.pem' }
- postfix::config { "smtpd_use_tls": value => 'yes' }
- postfix::config { "smtp_use_tls": value => 'yes' }
+ postfix::config { "smtpd_tls_cert_file": value => '/etc/ssl/certs/cert.crt' }
+ postfix::config { "smtpd_tls_key_file": value => '/etc/ssl/private/cert.pem' }
+ postfix::config { "smtpd_use_tls": value => 'yes' }
+ postfix::config { "smtp_use_tls": value => 'yes' }
+ postfix::config { "smtp_tls_policy_maps": value => 'hash:/etc/postfix/tls_policy' }
+
+ postfix::hash { "/etc/postfix/tls_policy":
+ ensure => present,
+ }
}