# Trusted users and groups
MAIN_TRUSTED_USERS=mail:www-data

# User account UID range
FIRST_USER_ACCOUNT_UID=1000

# TLS configuration
MAIN_TLS_ENABLE=true
MAIN_TLS_CERTIFICATE=/var/local/certificates/mail.lunch.org.uk/fullchain.pem
MAIN_TLS_PRIVATEKEY=/var/local/certificates/mail.lunch.org.uk/privkey.pem

# Local settings
# CHECK_RCPT_LOCAL_ACL_FILE=/etc/exim4/local_check_rcpt
CHECK_DATA_LOCAL_ACL_FILE=/etc/exim4/local_check_data

# DKIM keys and handling.
DKIM_CANON = relaxed
DKIM_SELECTOR = 20160621

# Get the domain from the outgoing mail.
DKIM_DOMAIN = ${lc:${domain:$h_from:}}

# The private key file.
DKIM_FILE = ${lookup {DKIM_DOMAIN-private.pem} dsearch,ret=full,filter=file {/etc/exim4/dkim}}

# If key exists then use it, if not don't.
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE} {DKIM_FILE} {0}}

# Log more TLS info than default.
MAIN_LOG_SELECTOR = +tls_peerdn +tls_sni

# SRS
SRS_SECRET = sxN7DlwZMWHar1J;L!wlKwbzc9ECB[F>!LEYm9[LF0