class mail::tls {
# TLS
- postfix::config { "smtpd_tls_cert_file": value => '/etc/ssl/certs/cert.crt' }
- postfix::config { "smtpd_tls_key_file": value => '/etc/ssl/private/cert.pem' }
- postfix::config { "smtpd_use_tls": value => 'yes' }
- postfix::config { "smtp_use_tls": value => 'yes' }
- postfix::config { "smtp_tls_policy_maps": value => 'hash:/etc/postfix/tls_policy' }
+ postfix::config { "smtpd_tls_cert_file": value => '/etc/ssl/certs/cert.crt' }
+ postfix::config { "smtpd_tls_key_file": value => '/etc/ssl/private/cert.pem' }
+ postfix::config { "smtpd_tls_security_level": value => 'may' }
+ postfix::config { "smtp_tls_security_level": value => 'may' }
+ postfix::config { "smtp_tls_policy_maps": value => 'hash:/etc/postfix/tls_policy' }
postfix::hash { "/etc/postfix/tls_policy":
ensure => present,