# allow relay for some TLS-authenticated clients
smtpd_tls_ask_ccert = yes
smtpd_tls_fingerprint_digest = sha1
-relay_clientcerts = hash:$config_directory/{{ postfix.relay_client_cert_whitelist }}
+relay_clientcerts = hash:$config_directory/relay_clientcerts
{% endif %}
{% if postfix.virtual_mailbox_domains is defined %}
# setup mail routes for virtual mail: all mail ends up being forwarded somewhere
virtual_transport = error
-transport_maps = hash:/etc/postfix/transport_map
+transport_maps = hash:$config_directory/transport_map
mailman_destination_recipient_limit = 1
{% endif %}
{% if postfix.smtp_outgoing is defined %}
+# send mail via specific IP
default_transport = {{ postfix.default_smtp_outgoing }}
sender_dependent_default_transport_maps = hash:$config_directory/sender_transport_map
{% endif %}