# vim:set ft=exim noet nowrap ts=8 sw=2:

# Updated 20201207 notes {at} notes.for.sabi.co.UK

# Specify your host's canonical name here. If this option is not set,
# the uname() function is called to obtain the name. The name is used
# in the SMTP banner ('HELO'/'EHLO'), so should match your sender's domain
# (some stupid sites do check that 'HELO' and 'MAIL FROM:' headers match).

primary_hostname		=example.com

# Specify the domain you want to be added to all unqualified addresses
# here. If this option is not set, the primary_hostname value is used.

#qualify_domain			=
#sender_unqualified_hosts	=

# If you want unqualified recipient addresses to be qualified with a different
# domain to unqualified sender addresses, specify the recipient domain here.
# If this option is not set, the qualify_domain value is used.

#qualify_recipient		=
#recipient_unqualified_hosts	=

# Specify your local domains as a colon-separated list here. If this option
# is not set, the qualify_recipient value is used as the only local domain.
# If you do not want to do any local deliveries, uncomment the following line,
# but do not supply any data for it.

domainlist local_domains	=@:@[]:localhost:example.com:*.example.com

domainlist relay_to_domains	=

hostlist auth_relay_hosts	=*
hostlist relay_from_hosts	=@:@[]:localhost:

# Defined macros. For the rather peculiar semantics read carefully:
#   http://www.exim.org/exim-html-4.30/doc/html/spec_6.html#IX551

SEND_ERRORS_TO			=postmaster@postmaster.example.com
# Two options: just sender verification or set a return path
SEND_RETURN_PATH		=postmaster@postmaster.example.com

QUEUEING			=yes
BOGOFILTERING			=yes

# TLS for connecting to this server
TLS_USER			=YES
# TLS for connecting to other servers
#TLS_SEND			=YES

#TLS_CACERT			=/etc/ssl/certs/ca-certificates.crt
TLS_CACERT			=/etc/pub/example.com_CAPub.pem
TLS_CERTIFICATE			=/etc/pub/example.com.ty_Pub.pem
TLS_PRIVATEKEY			=/etc/key/example.com.ty_Key.pem

DKIM_NOVERIFY                   =DEFINED
#DKIM_TABLE                     =/etc/exim4/dkim_domains
.ifndef DKIM_TABLE
DKIM_CANON                      =relaxed
DKIM_DOMAIN                     =example.com
DKIM_IDENTITY                   =root@example.com
DKIM_SELECTOR                   =dkim-00
DKIM_PRIVATE_KEY                =/etc/key/DKIM_Key.pem
#DKIM_STRICT                    =
#DKIM_SIGN_HEADERS              =
.endif
.ifdef DKIM_TABLE
#DKIM_CANON                     =${extract{canon}{${lookup{$sender_address_domain} \
#                                 lsearch*@{DKIM_TABLE}}}{$value}{relaxed}}
#DKIM_DOMAIN                    =${lookup{$sender_address_domain} \
#                                 lsearch*@{DKIM_TABLE}{$sender_address_domain}{}}
#DKIM_SELECTOR                  =${extract{selector}{${lookup{$sender_address_domain}l \
#                                 search*@{DKIM_TABLE}}}{$value}{}}
#DKIM_PRIVATE_KEY               =${extract{key}{${lookup{$sender_address_domain}l \
#                                 search*@{DKIM_TABLE}}}{$value}{}}
#DKIM_STRICT                    =${extract{strict}{${lookup{$sender_address_domain}l \
#                                 search*@{DKIM_TABLE}}}{$value}{false}}
.endif


# HAS_PAM not yet finished/tested.
#HAS_PAM			=yes

EXIM_USER			=Debian-exim
EXIM_GROUP			=ssl-cert

# USERCRAM:	password for MUAs connecting to this MTA with CRAM auth.
# SENDCRAM:	password for connecting this MTA to another MTA with CRAM auth.
FILE_USERCRAM			=/etc/exim-usercram
FILE_SENDCRAM			=/etc/exim-sendcram
# USERPASS:	password for MUAs connecting to this MTA with PLAIN auth.
# SENDPASS:	password for connecting this MTA to another MTA with PLAIN auth.
FILE_USERPASS			=/etc/exim-userpass
FILE_SENDPASS			=/etc/exim-sendpass

# LDAP_AUTHDN:	DN under which users can be authenticated in LDAP
#LDAP_AUTHDN			=

# In the same order as in the ACL and router sections.

FILE_DENY_F			=/etc/alias/f2deny
FILE_ACCEPT_AF			=/etc/alias/af2accept
FILE_DENY_A			=/etc/alias/a2deny

FILE_ALIAS_A2A			=/etc/alias/a2a
FILE_ALIAS_D2A			=/etc/alias/d2a
FILE_ALIAS_D2D			=/etc/alias/d2d

FILE_ALIAS_D2HOST		=/etc/alias/d2host

.include /etc/exim.conf
