{{range $mailhosts := split (getenv "MAILHOSTS") ";"}}
{{$values := split ($mailhosts) ":"}}
{{index $values 0}}:smtp  inet  n - - - -  smtpd
  -o myhostname={{index $values 1}}
  -o smtpd_tls_key_file=/etc/ssl/mail/{{index $values 1}}/privkey.pem
  -o smtpd_tls_cert_file=/etc/ssl/mail/{{index $values 1}}//fullchain.pem

{{index $values 1}}-out unix -     -    -    -    -    smtp
  -o smtp_bind_address={{index $values 0}}
  -o smtp_helo_name={{index $values 2}}
  -o syslog_name=postfix-{{index $values 2}}

{{index $values 0}}:submission  inet  n  - - - -  smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_relay_restrictions=permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
  -o milter_macro_daemon_name=ORIGINATING
  -o smtpd_tls_key_file=/etc/ssl/mail/{{index $values 1}}/privkey.pem
  -o smtpd_tls_cert_file=/etc/ssl/mail/{{index $values 1}}//fullchain.pem
{{end}}

smtp      inet  n       -       n       -       -       smtpd
pickup    unix  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
#qmgr     unix  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
retry     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache