Puppet Class: postfix

Defined in:
manifests/init.pp

Overview

Manage Postfix.

Examples:

Configure Postfix with the defaults as shipped by the OS and managing any aliases using the standard Puppet mailalias resource type

include postfix

postfix::lookup::database { '/etc/aliases':
  type => 'hash',
}

Mailalias <||> -> Postfix::Lookup::Database['/etc/aliases']

Configure Postfix with an additional submission service running on TCP port 587

include postfix

postfix::master { 'submission/inet':
  private => 'n',
  chroot  => 'n',
  command => 'smtpd -o smtpd_tls_security_level=encrypt -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject',
}

Configure Postfix for virtual mailbox hosting using LDAP to provide the various lookup tables

class { 'postfix':
  virtual_mailbox_base    => '/var/mail/vhosts',
  virtual_mailbox_domains => ['ldap:/etc/postfix/virtualdomains.cf'],
  virtual_mailbox_maps    => ['ldap:/etc/postfix/virtualrecipients.cf'],
  virtual_minimum_uid     => 100,
  virtual_uid_maps        => 'static:5000',
  virtual_gid_maps        => 'static:5000',
}

# Specify connection defaults to enable sharing as per LDAP_README
Postfix::Lookup::Ldap {
  server_host => ['ldap://192.0.2.1'],
  search_base => 'dc=example,dc=com',
  bind_dn     => 'cn=Manager,dc=example,dc=com',
  bind_pw     => 'secret',
  version     => 3,
}

postfix::lookup::ldap { '/etc/postfix/virtualdomains.cf':
  query_filter     => '(associatedDomain=%s)',
  result_attribute => ['associatedDomain'],
}

postfix::lookup::ldap { '/etc/postfix/virtualrecipients.cf':
  query_filter     => '(mail=%s)',
  result_attribute => ['mail'],
}

Parameters:

  • conf_dir (Stdlib::Absolutepath)
  • services (Hash[String, Hash[String, Any]])
  • lookup_packages (Hash[Postfix::Type::Lookup, String])
  • package_name (String)
  • service_name (String)
  • twobounce_notice_recipient (Optional[String]) —

    2bounce_notice_recipient is a violation of Puppet variable naming conventions.

  • access_map_defer_code (Optional[String])
  • access_map_reject_code (Optional[String])
  • address_verify_cache_cleanup_interval (Optional[String])
  • address_verify_default_transport (Optional[String])
  • address_verify_local_transport (Optional[String])
  • address_verify_map (Optional[String])
  • address_verify_negative_cache (Optional[Variant[Boolean, String]])
  • address_verify_negative_expire_time (Optional[String])
  • address_verify_negative_refresh_time (Optional[String])
  • address_verify_poll_count (Optional[String])
  • address_verify_poll_delay (Optional[String])
  • address_verify_positive_expire_time (Optional[String])
  • address_verify_positive_refresh_time (Optional[String])
  • address_verify_relay_transport (Optional[String])
  • address_verify_relayhost (Optional[String])
  • address_verify_sender (Optional[String])
  • address_verify_sender_dependent_default_transport_maps (Optional[Array[String, 1]])
  • address_verify_sender_dependent_relayhost_maps (Optional[Array[String, 1]])
  • address_verify_sender_ttl (Optional[String])
  • address_verify_service_name (Optional[String])
  • address_verify_transport_maps (Optional[Array[String, 1]])
  • address_verify_virtual_transport (Optional[String])
  • alias_database (Optional[Array[String, 1]])
  • alias_maps (Optional[Array[String, 1]])
  • allow_mail_to_commands (Optional[Array[String, 1]])
  • allow_mail_to_files (Optional[Array[String, 1]])
  • allow_min_user (Optional[Variant[Boolean, String]])
  • allow_percent_hack (Optional[Variant[Boolean, String]])
  • allow_untrusted_routing (Optional[Variant[Boolean, String]])
  • alternate_config_directories (Optional[Array[String, 1]])
  • always_add_missing_headers (Optional[Variant[Boolean, String]])
  • always_bcc (Optional[String])
  • anvil_rate_time_unit (Optional[String])
  • anvil_status_update_time (Optional[String])
  • append_at_myorigin (Optional[Variant[Boolean, String]])
  • append_dot_mydomain (Optional[Variant[Boolean, String]])
  • application_event_drain_time (Optional[String])
  • authorized_flush_users (Optional[Array[String, 1]])
  • authorized_mailq_users (Optional[Array[String, 1]])
  • authorized_submit_users (Optional[Array[String, 1]])
  • backwards_bounce_logfile_compatibility (Optional[Variant[Boolean, String]])
  • berkeley_db_create_buffer_size (Optional[String])
  • berkeley_db_read_buffer_size (Optional[String])
  • best_mx_transport (Optional[String])
  • biff (Optional[Variant[Boolean, String]])
  • body_checks (Optional[Array[String, 1]])
  • body_checks_size_limit (Optional[String])
  • bounce_notice_recipient (Optional[String])
  • bounce_queue_lifetime (Optional[String])
  • bounce_service_name (Optional[String])
  • bounce_size_limit (Optional[String])
  • bounce_template_file (Optional[String])
  • broken_sasl_auth_clients (Optional[Variant[Boolean, String]])
  • canonical_classes (Optional[Array[String, 1]])
  • canonical_maps (Optional[Array[String, 1]])
  • cleanup_service_name (Optional[String])
  • command_directory (Optional[String])
  • command_execution_directory (Optional[String])
  • command_expansion_filter (Optional[String])
  • command_time_limit (Optional[String])
  • compatibility_level (Optional[String])
  • config_directory (Optional[String])
  • connection_cache_protocol_timeout (Optional[String])
  • connection_cache_service_name (Optional[String])
  • connection_cache_status_update_time (Optional[String])
  • connection_cache_ttl_limit (Optional[String])
  • content_filter (Optional[String])
  • cyrus_sasl_config_path (Optional[Array[String, 1]])
  • daemon_directory (Optional[String])
  • daemon_table_open_error_is_fatal (Optional[Variant[Boolean, String]])
  • daemon_timeout (Optional[String])
  • data_directory (Optional[String])
  • debug_peer_level (Optional[String])
  • debug_peer_list (Optional[Array[String, 1]])
  • debugger_command (Optional[String])
  • default_database_type (Postfix::Type::Lookup::Database)
  • default_delivery_slot_cost (Optional[String])
  • default_delivery_slot_discount (Optional[String])
  • default_delivery_slot_loan (Optional[String])
  • default_destination_concurrency_failed_cohort_limit (Optional[String])
  • default_destination_concurrency_limit (Optional[String])
  • default_destination_concurrency_negative_feedback (Optional[String])
  • default_destination_concurrency_positive_feedback (Optional[String])
  • default_destination_rate_delay (Optional[String])
  • default_destination_recipient_limit (Optional[String])
  • default_extra_recipient_limit (Optional[String])
  • default_filter_nexthop (Optional[String])
  • default_minimum_delivery_slots (Optional[String])
  • default_privs (Optional[String])
  • default_process_limit (Optional[String])
  • default_rbl_reply (Optional[String])
  • default_recipient_limit (Optional[String])
  • default_recipient_refill_delay (Optional[String])
  • default_recipient_refill_limit (Optional[String])
  • default_transport (Optional[String])
  • default_verp_delimiters (Optional[String])
  • defer_code (Optional[String])
  • defer_service_name (Optional[String])
  • defer_transports (Optional[Array[String, 1]])
  • delay_logging_resolution_limit (Optional[String])
  • delay_notice_recipient (Optional[String])
  • delay_warning_time (Optional[String])
  • deliver_lock_attempts (Optional[String])
  • deliver_lock_delay (Optional[String])
  • destination_concurrency_feedback_debug (Optional[Variant[Boolean, String]])
  • detect_8bit_encoding_header (Optional[Variant[Boolean, String]])
  • disable_dns_lookups (Optional[Variant[Boolean, String]])
  • disable_mime_input_processing (Optional[Variant[Boolean, String]])
  • disable_mime_output_conversion (Optional[Variant[Boolean, String]])
  • disable_verp_bounces (Optional[Variant[Boolean, String]])
  • disable_vrfy_command (Optional[Variant[Boolean, String]])
  • dnsblog_reply_delay (Optional[String])
  • dnsblog_service_name (Optional[String])
  • dont_remove (Optional[String])
  • double_bounce_sender (Optional[String])
  • duplicate_filter_limit (Optional[String])
  • empty_address_default_transport_maps_lookup_key (Optional[String])
  • empty_address_recipient (Optional[String])
  • empty_address_relayhost_maps_lookup_key (Optional[String])
  • enable_long_queue_ids (Optional[Variant[Boolean, String]])
  • enable_original_recipient (Optional[Variant[Boolean, String]])
  • error_notice_recipient (Optional[String])
  • error_service_name (Optional[String])
  • execution_directory_expansion_filter (Optional[String])
  • expand_owner_alias (Optional[Variant[Boolean, String]])
  • export_environment (Optional[Array[String, 1]])
  • fallback_transport (Optional[String])
  • fallback_transport_maps (Optional[Array[String, 1]])
  • fast_flush_domains (Optional[Array[String, 1]])
  • fast_flush_purge_time (Optional[String])
  • fast_flush_refresh_time (Optional[String])
  • fault_injection_code (Optional[String])
  • flush_service_name (Optional[String])
  • fork_attempts (Optional[String])
  • fork_delay (Optional[String])
  • forward_expansion_filter (Optional[String])
  • forward_path (Optional[Array[String, 1]])
  • frozen_delivered_to (Optional[Variant[Boolean, String]])
  • hash_queue_depth (Optional[String])
  • hash_queue_names (Optional[Array[String, 1]])
  • header_address_token_limit (Optional[String])
  • header_checks (Optional[Array[String, 1]])
  • header_size_limit (Optional[String])
  • helpful_warnings (Optional[Variant[Boolean, String]])
  • home_mailbox (Optional[String])
  • hopcount_limit (Optional[String])
  • html_directory (Optional[Variant[Boolean, String]])
  • ignore_mx_lookup_error (Optional[Variant[Boolean, String]])
  • import_environment (Optional[Array[String, 1]])
  • in_flow_delay (Optional[String])
  • inet_interfaces (Optional[Array[String, 1]])
  • inet_protocols (Optional[Array[String, 1]])
  • initial_destination_concurrency (Optional[String])
  • internal_mail_filter_classes (Optional[Array[String, 1]])
  • invalid_hostname_reject_code (Optional[String])
  • ipc_idle (Optional[String])
  • ipc_timeout (Optional[String])
  • ipc_ttl (Optional[String])
  • line_length_limit (Optional[String])
  • lmtp_address_preference (Optional[String])
  • lmtp_assume_final (Optional[Variant[Boolean, String]])
  • lmtp_bind_address (Optional[String])
  • lmtp_bind_address6 (Optional[String])
  • lmtp_body_checks (Optional[Array[String, 1]])
  • lmtp_cname_overrides_servername (Optional[Variant[Boolean, String]])
  • lmtp_connect_timeout (Optional[String])
  • lmtp_connection_cache_destinations (Optional[Array[String, 1]])
  • lmtp_connection_cache_on_demand (Optional[Variant[Boolean, String]])
  • lmtp_connection_cache_time_limit (Optional[String])
  • lmtp_connection_reuse_time_limit (Optional[String])
  • lmtp_data_done_timeout (Optional[String])
  • lmtp_data_init_timeout (Optional[String])
  • lmtp_data_xfer_timeout (Optional[String])
  • lmtp_defer_if_no_mx_address_found (Optional[Variant[Boolean, String]])
  • lmtp_discard_lhlo_keyword_address_maps (Optional[Array[String, 1]])
  • lmtp_discard_lhlo_keywords (Optional[Array[String, 1]])
  • lmtp_dns_resolver_options (Optional[Array[String, 1]])
  • lmtp_enforce_tls (Optional[Variant[Boolean, String]])
  • lmtp_generic_maps (Optional[Array[String, 1]])
  • lmtp_header_checks (Optional[Array[String, 1]])
  • lmtp_host_lookup (Optional[Array[String, 1]])
  • lmtp_lhlo_name (Optional[String])
  • lmtp_lhlo_timeout (Optional[String])
  • lmtp_line_length_limit (Optional[String])
  • lmtp_mail_timeout (Optional[String])
  • lmtp_mime_header_checks (Optional[Array[String, 1]])
  • lmtp_mx_address_limit (Optional[String])
  • lmtp_mx_session_limit (Optional[String])
  • lmtp_nested_header_checks (Optional[Array[String, 1]])
  • lmtp_per_record_deadline (Optional[Variant[Boolean, String]])
  • lmtp_pix_workaround_delay_time (Optional[String])
  • lmtp_pix_workaround_maps (Optional[Array[String, 1]])
  • lmtp_pix_workaround_threshold_time (Optional[String])
  • lmtp_pix_workarounds (Optional[Array[String, 1]])
  • lmtp_quit_timeout (Optional[String])
  • lmtp_quote_rfc821_envelope (Optional[Variant[Boolean, String]])
  • lmtp_randomize_addresses (Optional[Variant[Boolean, String]])
  • lmtp_rcpt_timeout (Optional[String])
  • lmtp_reply_filter (Optional[String])
  • lmtp_rset_timeout (Optional[String])
  • lmtp_sasl_auth_cache_name (Optional[String])
  • lmtp_sasl_auth_cache_time (Optional[String])
  • lmtp_sasl_auth_enable (Optional[Variant[Boolean, String]])
  • lmtp_sasl_auth_soft_bounce (Optional[Variant[Boolean, String]])
  • lmtp_sasl_mechanism_filter (Optional[Array[String, 1]])
  • lmtp_sasl_password_maps (Optional[Array[String, 1]])
  • lmtp_sasl_path (Optional[String])
  • lmtp_sasl_security_options (Optional[Array[String, 1]])
  • lmtp_sasl_tls_security_options (Optional[Array[String, 1]])
  • lmtp_sasl_tls_verified_security_options (Optional[Array[String, 1]])
  • lmtp_sasl_type (Optional[String])
  • lmtp_send_dummy_mail_auth (Optional[Variant[Boolean, String]])
  • lmtp_send_xforward_command (Optional[Variant[Boolean, String]])
  • lmtp_sender_dependent_authentication (Optional[Variant[Boolean, String]])
  • lmtp_skip_5xx_greeting (Optional[Variant[Boolean, String]])
  • lmtp_skip_quit_response (Optional[Variant[Boolean, String]])
  • lmtp_starttls_timeout (Optional[String])
  • lmtp_tcp_port (Optional[String])
  • lmtp_tls_cafile (Optional[String])
  • lmtp_tls_capath (Optional[String])
  • lmtp_tls_block_early_mail_reply (Optional[Variant[Boolean, String]])
  • lmtp_tls_cert_file (Optional[String])
  • lmtp_tls_ciphers (Optional[String])
  • lmtp_tls_dcert_file (Optional[String])
  • lmtp_tls_dkey_file (Optional[String])
  • lmtp_tls_eccert_file (Optional[String])
  • lmtp_tls_eckey_file (Optional[String])
  • lmtp_tls_enforce_peername (Optional[Variant[Boolean, String]])
  • lmtp_tls_exclude_ciphers (Optional[Array[String, 1]])
  • lmtp_tls_fingerprint_cert_match (Optional[Array[String, 1]])
  • lmtp_tls_fingerprint_digest (Optional[String])
  • lmtp_tls_key_file (Optional[String])
  • lmtp_tls_loglevel (Optional[String])
  • lmtp_tls_mandatory_ciphers (Optional[String])
  • lmtp_tls_mandatory_exclude_ciphers (Optional[Array[String, 1]])
  • lmtp_tls_mandatory_protocols (Optional[Array[String, 1]])
  • lmtp_tls_note_starttls_offer (Optional[Variant[Boolean, String]])
  • lmtp_tls_per_site (Optional[Array[String, 1]])
  • lmtp_tls_policy_maps (Optional[Array[String, 1]])
  • lmtp_tls_protocols (Optional[Array[String, 1]])
  • lmtp_tls_scert_verifydepth (Optional[String])
  • lmtp_tls_secure_cert_match (Optional[Array[String, 1]])
  • lmtp_tls_security_level (Optional[String])
  • lmtp_tls_session_cache_database (Optional[String])
  • lmtp_tls_session_cache_timeout (Optional[String])
  • lmtp_tls_verify_cert_match (Optional[Array[String, 1]])
  • lmtp_use_tls (Optional[Variant[Boolean, String]])
  • lmtp_xforward_timeout (Optional[String])
  • local_command_shell (Optional[String])
  • local_header_rewrite_clients (Optional[Array[String, 1]])
  • local_recipient_maps (Optional[Array[String, 1]])
  • local_transport (Optional[String])
  • luser_relay (Optional[String])
  • mail_name (Optional[String])
  • mail_owner (Optional[String])
  • mail_release_date (Optional[String])
  • mail_spool_directory (Optional[String])
  • mail_version (Optional[String])
  • mailbox_command (Optional[String])
  • mailbox_command_maps (Optional[Array[String, 1]])
  • mailbox_delivery_lock (Optional[Array[String, 1]])
  • mailbox_size_limit (Optional[String])
  • mailbox_transport (Optional[String])
  • mailbox_transport_maps (Optional[Array[String, 1]])
  • mailq_path (Optional[String])
  • manpage_directory (Optional[String])
  • maps_rbl_domains (Optional[Array[String, 1]])
  • maps_rbl_reject_code (Optional[String])
  • masquerade_classes (Optional[Array[String, 1]])
  • masquerade_domains (Optional[Array[String, 1]])
  • masquerade_exceptions (Optional[Array[String, 1]])
  • master_service_disable (Optional[Array[String, 1]])
  • max_idle (Optional[String])
  • max_use (Optional[String])
  • maximal_backoff_time (Optional[String])
  • maximal_queue_lifetime (Optional[String])
  • message_reject_characters (Optional[String])
  • message_size_limit (Optional[String])
  • message_strip_characters (Optional[String])
  • meta_directory (Optional[String])
  • milter_command_timeout (Optional[String])
  • milter_connect_macros (Optional[String])
  • milter_connect_timeout (Optional[String])
  • milter_content_timeout (Optional[String])
  • milter_data_macros (Optional[String])
  • milter_default_action (Optional[String])
  • milter_end_of_data_macros (Optional[String])
  • milter_end_of_header_macros (Optional[String])
  • milter_header_checks (Optional[Array[String, 1]])
  • milter_helo_macros (Optional[String])
  • milter_macro_daemon_name (Optional[String])
  • milter_macro_v (Optional[String])
  • milter_mail_macros (Optional[String])
  • milter_protocol (Optional[String])
  • milter_rcpt_macros (Optional[String])
  • milter_unknown_command_macros (Optional[String])
  • mime_boundary_length_limit (Optional[String])
  • mime_header_checks (Optional[Array[String, 1]])
  • mime_nesting_limit (Optional[String])
  • minimal_backoff_time (Optional[String])
  • multi_instance_directories (Optional[Array[String, 1]])
  • multi_instance_enable (Optional[Variant[Boolean, String]])
  • multi_instance_group (Optional[String])
  • multi_instance_name (Optional[String])
  • multi_instance_wrapper (Optional[String])
  • multi_recipient_bounce_reject_code (Optional[String])
  • mydestination (Optional[Array[String, 1]])
  • mydomain (Optional[String])
  • myhostname (Optional[String])
  • mynetworks (Optional[Array[String, 1]])
  • mynetworks_style (Optional[String])
  • myorigin (Optional[String])
  • nested_header_checks (Optional[Array[String, 1]])
  • newaliases_path (Optional[String])
  • non_fqdn_reject_code (Optional[String])
  • non_smtpd_milters (Optional[Array[String, 1]])
  • notify_classes (Optional[Array[String, 1]])
  • owner_request_special (Optional[Variant[Boolean, String]])
  • parent_domain_matches_subdomains (Optional[Array[String, 1]])
  • permit_mx_backup_networks (Optional[Array[String, 1]])
  • pickup_service_name (Optional[String])
  • plaintext_reject_code (Optional[String])
  • postmulti_control_commands (Optional[Array[String, 1]])
  • postmulti_start_commands (Optional[Array[String, 1]])
  • postmulti_stop_commands (Optional[Array[String, 1]])
  • postscreen_access_list (Optional[Array[String, 1]])
  • postscreen_bare_newline_action (Optional[String])
  • postscreen_bare_newline_enable (Optional[Variant[Boolean, String]])
  • postscreen_bare_newline_ttl (Optional[String])
  • postscreen_blacklist_action (Optional[String])
  • postscreen_cache_cleanup_interval (Optional[String])
  • postscreen_cache_map (Optional[String])
  • postscreen_cache_retention_time (Optional[String])
  • postscreen_client_connection_count_limit (Optional[String])
  • postscreen_command_count_limit (Optional[String])
  • postscreen_command_filter (Optional[String])
  • postscreen_command_time_limit (Optional[String])
  • postscreen_disable_vrfy_command (Optional[Variant[Boolean, String]])
  • postscreen_discard_ehlo_keyword_address_maps (Optional[Array[String, 1]])
  • postscreen_discard_ehlo_keywords (Optional[Array[String, 1]])
  • postscreen_dnsbl_action (Optional[String])
  • postscreen_dnsbl_reply_map (Optional[String])
  • postscreen_dnsbl_sites (Optional[Array[String, 1]])
  • postscreen_dnsbl_threshold (Optional[String])
  • postscreen_dnsbl_ttl (Optional[String])
  • postscreen_enforce_tls (Optional[Variant[Boolean, String]])
  • postscreen_expansion_filter (Optional[String])
  • postscreen_forbidden_commands (Optional[Array[String, 1]])
  • postscreen_greet_action (Optional[String])
  • postscreen_greet_banner (Optional[String])
  • postscreen_greet_ttl (Optional[String])
  • postscreen_greet_wait (Optional[String])
  • postscreen_helo_required (Optional[Variant[Boolean, String]])
  • postscreen_non_smtp_command_action (Optional[String])
  • postscreen_non_smtp_command_enable (Optional[Variant[Boolean, String]])
  • postscreen_non_smtp_command_ttl (Optional[String])
  • postscreen_pipelining_action (Optional[String])
  • postscreen_pipelining_enable (Optional[Variant[Boolean, String]])
  • postscreen_pipelining_ttl (Optional[String])
  • postscreen_post_queue_limit (Optional[String])
  • postscreen_pre_queue_limit (Optional[String])
  • postscreen_reject_footer (Optional[String])
  • postscreen_tls_security_level (Optional[String])
  • postscreen_upstream_proxy_protocol (Optional[String])
  • postscreen_upstream_proxy_timeout (Optional[String])
  • postscreen_use_tls (Optional[Variant[Boolean, String]])
  • postscreen_watchdog_timeout (Optional[String])
  • postscreen_whitelist_interfaces (Optional[Array[String, 1]])
  • prepend_delivered_header (Optional[Array[String, 1]])
  • process_id_directory (Optional[String])
  • propagate_unmatched_extensions (Optional[Array[String, 1]])
  • proxy_interfaces (Optional[Array[String, 1]])
  • proxy_read_maps (Optional[Array[String, 1]])
  • proxy_write_maps (Optional[Array[String, 1]])
  • proxymap_service_name (Optional[String])
  • proxywrite_service_name (Optional[String])
  • qmgr_clog_warn_time (Optional[String])
  • qmgr_daemon_timeout (Optional[String])
  • qmgr_fudge_factor (Optional[String])
  • qmgr_ipc_timeout (Optional[String])
  • qmgr_message_active_limit (Optional[String])
  • qmgr_message_recipient_limit (Optional[String])
  • qmgr_message_recipient_minimum (Optional[String])
  • qmqpd_authorized_clients (Optional[Array[String, 1]])
  • qmqpd_client_port_logging (Optional[Variant[Boolean, String]])
  • qmqpd_error_delay (Optional[String])
  • qmqpd_timeout (Optional[String])
  • queue_directory (Optional[String])
  • queue_file_attribute_count_limit (Optional[String])
  • queue_minfree (Optional[String])
  • queue_run_delay (Optional[String])
  • queue_service_name (Optional[String])
  • rbl_reply_maps (Optional[Array[String, 1]])
  • readme_directory (Optional[Variant[Boolean, String]])
  • receive_override_options (Optional[Array[String, 1]])
  • recipient_bcc_maps (Optional[Array[String, 1]])
  • recipient_canonical_classes (Optional[Array[String, 1]])
  • recipient_canonical_maps (Optional[Array[String, 1]])
  • recipient_delimiter (Optional[String])
  • reject_code (Optional[String])
  • reject_tempfail_action (Optional[String])
  • relay_clientcerts (Optional[Array[String, 1]])
  • relay_domains (Optional[Array[String, 1]])
  • relay_domains_reject_code (Optional[String])
  • relay_recipient_maps (Optional[Array[String, 1]])
  • relay_transport (Optional[String])
  • relayhost (Optional[String])
  • relocated_maps (Optional[Array[String, 1]])
  • remote_header_rewrite_domain (Optional[String])
  • require_home_directory (Optional[Variant[Boolean, String]])
  • reset_owner_alias (Optional[Variant[Boolean, String]])
  • resolve_dequoted_address (Optional[Variant[Boolean, String]])
  • resolve_null_domain (Optional[Variant[Boolean, String]])
  • resolve_numeric_domain (Optional[Variant[Boolean, String]])
  • rewrite_service_name (Optional[String])
  • sample_directory (Optional[String])
  • send_cyrus_sasl_authzid (Optional[Variant[Boolean, String]])
  • sender_bcc_maps (Optional[Array[String, 1]])
  • sender_canonical_classes (Optional[Array[String, 1]])
  • sender_canonical_maps (Optional[Array[String, 1]])
  • sender_dependent_default_transport_maps (Optional[Array[String, 1]])
  • sender_dependent_relayhost_maps (Optional[Array[String, 1]])
  • sendmail_fix_line_endings (Optional[String])
  • sendmail_path (Optional[String])
  • service_throttle_time (Optional[String])
  • setgid_group (Optional[String])
  • shlib_directory (Optional[Variant[Boolean, String]])
  • show_user_unknown_table_name (Optional[Variant[Boolean, String]])
  • showq_service_name (Optional[String])
  • smtp_address_preference (Optional[String])
  • smtp_always_send_ehlo (Optional[Variant[Boolean, String]])
  • smtp_bind_address (Optional[String])
  • smtp_bind_address6 (Optional[String])
  • smtp_body_checks (Optional[Array[String, 1]])
  • smtp_cname_overrides_servername (Optional[Variant[Boolean, String]])
  • smtp_connect_timeout (Optional[String])
  • smtp_connection_cache_destinations (Optional[Array[String, 1]])
  • smtp_connection_cache_on_demand (Optional[Variant[Boolean, String]])
  • smtp_connection_cache_time_limit (Optional[String])
  • smtp_connection_reuse_time_limit (Optional[String])
  • smtp_data_done_timeout (Optional[String])
  • smtp_data_init_timeout (Optional[String])
  • smtp_data_xfer_timeout (Optional[String])
  • smtp_defer_if_no_mx_address_found (Optional[Variant[Boolean, String]])
  • smtp_discard_ehlo_keyword_address_maps (Optional[Array[String, 1]])
  • smtp_discard_ehlo_keywords (Optional[Array[String, 1]])
  • smtp_dns_resolver_options (Optional[Array[String, 1]])
  • smtp_enforce_tls (Optional[Variant[Boolean, String]])
  • smtp_fallback_relay (Optional[Array[String, 1]])
  • smtp_generic_maps (Optional[Array[String, 1]])
  • smtp_header_checks (Optional[Array[String, 1]])
  • smtp_helo_name (Optional[String])
  • smtp_helo_timeout (Optional[String])
  • smtp_host_lookup (Optional[Array[String, 1]])
  • smtp_line_length_limit (Optional[String])
  • smtp_mail_timeout (Optional[String])
  • smtp_mime_header_checks (Optional[Array[String, 1]])
  • smtp_mx_address_limit (Optional[String])
  • smtp_mx_session_limit (Optional[String])
  • smtp_nested_header_checks (Optional[Array[String, 1]])
  • smtp_never_send_ehlo (Optional[Variant[Boolean, String]])
  • smtp_per_record_deadline (Optional[Variant[Boolean, String]])
  • smtp_pix_workaround_delay_time (Optional[String])
  • smtp_pix_workaround_maps (Optional[Array[String, 1]])
  • smtp_pix_workaround_threshold_time (Optional[String])
  • smtp_pix_workarounds (Optional[Array[String, 1]])
  • smtp_quit_timeout (Optional[String])
  • smtp_quote_rfc821_envelope (Optional[Variant[Boolean, String]])
  • smtp_randomize_addresses (Optional[Variant[Boolean, String]])
  • smtp_rcpt_timeout (Optional[String])
  • smtp_reply_filter (Optional[String])
  • smtp_rset_timeout (Optional[String])
  • smtp_sasl_auth_cache_name (Optional[String])
  • smtp_sasl_auth_cache_time (Optional[String])
  • smtp_sasl_auth_enable (Optional[Variant[Boolean, String]])
  • smtp_sasl_auth_soft_bounce (Optional[Variant[Boolean, String]])
  • smtp_sasl_mechanism_filter (Optional[Array[String, 1]])
  • smtp_sasl_password_maps (Optional[Array[String, 1]])
  • smtp_sasl_path (Optional[String])
  • smtp_sasl_security_options (Optional[Array[String, 1]])
  • smtp_sasl_tls_security_options (Optional[Array[String, 1]])
  • smtp_sasl_tls_verified_security_options (Optional[Array[String, 1]])
  • smtp_sasl_type (Optional[String])
  • smtp_send_dummy_mail_auth (Optional[Variant[Boolean, String]])
  • smtp_send_xforward_command (Optional[Variant[Boolean, String]])
  • smtp_sender_dependent_authentication (Optional[Variant[Boolean, String]])
  • smtp_skip_5xx_greeting (Optional[Variant[Boolean, String]])
  • smtp_skip_quit_response (Optional[Variant[Boolean, String]])
  • smtp_starttls_timeout (Optional[String])
  • smtp_tls_cafile (Optional[String])
  • smtp_tls_capath (Optional[String])
  • smtp_tls_block_early_mail_reply (Optional[Variant[Boolean, String]])
  • smtp_tls_cert_file (Optional[String])
  • smtp_tls_ciphers (Optional[String])
  • smtp_tls_dcert_file (Optional[String])
  • smtp_tls_dkey_file (Optional[String])
  • smtp_tls_eccert_file (Optional[String])
  • smtp_tls_eckey_file (Optional[String])
  • smtp_tls_enforce_peername (Optional[Variant[Boolean, String]])
  • smtp_tls_exclude_ciphers (Optional[Array[String, 1]])
  • smtp_tls_fingerprint_cert_match (Optional[Array[String, 1]])
  • smtp_tls_fingerprint_digest (Optional[String])
  • smtp_tls_key_file (Optional[String])
  • smtp_tls_loglevel (Optional[String])
  • smtp_tls_mandatory_ciphers (Optional[String])
  • smtp_tls_mandatory_exclude_ciphers (Optional[Array[String, 1]])
  • smtp_tls_mandatory_protocols (Optional[Array[String, 1]])
  • smtp_tls_note_starttls_offer (Optional[Variant[Boolean, String]])
  • smtp_tls_per_site (Optional[Array[String, 1]])
  • smtp_tls_policy_maps (Optional[Array[String, 1]])
  • smtp_tls_protocols (Optional[Array[String, 1]])
  • smtp_tls_scert_verifydepth (Optional[String])
  • smtp_tls_secure_cert_match (Optional[Array[String, 1]])
  • smtp_tls_security_level (Optional[String])
  • smtp_tls_session_cache_database (Optional[String])
  • smtp_tls_session_cache_timeout (Optional[String])
  • smtp_tls_verify_cert_match (Optional[Array[String, 1]])
  • smtp_use_tls (Optional[Variant[Boolean, String]])
  • smtp_xforward_timeout (Optional[String])
  • smtpd_authorized_verp_clients (Optional[Array[String, 1]])
  • smtpd_authorized_xclient_hosts (Optional[Array[String, 1]])
  • smtpd_authorized_xforward_hosts (Optional[Array[String, 1]])
  • smtpd_banner (Optional[String])
  • smtpd_client_connection_count_limit (Optional[String])
  • smtpd_client_connection_rate_limit (Optional[String])
  • smtpd_client_event_limit_exceptions (Optional[Array[String, 1]])
  • smtpd_client_message_rate_limit (Optional[String])
  • smtpd_client_new_tls_session_rate_limit (Optional[String])
  • smtpd_client_port_logging (Optional[Variant[Boolean, String]])
  • smtpd_client_recipient_rate_limit (Optional[String])
  • smtpd_client_restrictions (Optional[Array[String, 1]])
  • smtpd_command_filter (Optional[String])
  • smtpd_data_restrictions (Optional[Array[String, 1]])
  • smtpd_delay_open_until_valid_rcpt (Optional[Variant[Boolean, String]])
  • smtpd_delay_reject (Optional[Variant[Boolean, String]])
  • smtpd_discard_ehlo_keyword_address_maps (Optional[Array[String, 1]])
  • smtpd_discard_ehlo_keywords (Optional[Array[String, 1]])
  • smtpd_end_of_data_restrictions (Optional[Array[String, 1]])
  • smtpd_enforce_tls (Optional[Variant[Boolean, String]])
  • smtpd_error_sleep_time (Optional[String])
  • smtpd_etrn_restrictions (Optional[Array[String, 1]])
  • smtpd_expansion_filter (Optional[String])
  • smtpd_forbidden_commands (Optional[Array[String, 1]])
  • smtpd_hard_error_limit (Optional[String])
  • smtpd_helo_required (Optional[Variant[Boolean, String]])
  • smtpd_helo_restrictions (Optional[Array[String, 1]])
  • smtpd_history_flush_threshold (Optional[String])
  • smtpd_junk_command_limit (Optional[String])
  • smtpd_log_access_permit_actions (Optional[String])
  • smtpd_milters (Optional[Array[String, 1]])
  • smtpd_noop_commands (Optional[Array[String, 1]])
  • smtpd_null_access_lookup_key (Optional[String])
  • smtpd_peername_lookup (Optional[Variant[Boolean, String]])
  • smtpd_per_record_deadline (Optional[Variant[Boolean, String]])
  • smtpd_policy_service_max_idle (Optional[String])
  • smtpd_policy_service_max_ttl (Optional[String])
  • smtpd_policy_service_timeout (Optional[String])
  • smtpd_proxy_ehlo (Optional[String])
  • smtpd_proxy_filter (Optional[String])
  • smtpd_proxy_options (Optional[Array[String, 1]])
  • smtpd_proxy_timeout (Optional[String])
  • smtpd_recipient_limit (Optional[String])
  • smtpd_recipient_overshoot_limit (Optional[String])
  • smtpd_recipient_restrictions (Optional[Array[String, 1]])
  • smtpd_reject_footer (Optional[String])
  • smtpd_reject_unlisted_recipient (Optional[Variant[Boolean, String]])
  • smtpd_reject_unlisted_sender (Optional[Variant[Boolean, String]])
  • smtpd_relay_restrictions (Optional[Array[String, 1]])
  • smtpd_restriction_classes (Optional[Array[String, 1]])
  • smtpd_sasl_auth_enable (Optional[Variant[Boolean, String]])
  • smtpd_sasl_authenticated_header (Optional[Variant[Boolean, String]])
  • smtpd_sasl_exceptions_networks (Optional[Array[String, 1]])
  • smtpd_sasl_local_domain (Optional[String])
  • smtpd_sasl_path (Optional[String])
  • smtpd_sasl_security_options (Optional[Array[String, 1]])
  • smtpd_sasl_tls_security_options (Optional[Array[String, 1]])
  • smtpd_sasl_type (Optional[String])
  • smtpd_sender_login_maps (Optional[Array[String, 1]])
  • smtpd_sender_restrictions (Optional[Array[String, 1]])
  • smtpd_service_name (Optional[String])
  • smtpd_soft_error_limit (Optional[String])
  • smtpd_starttls_timeout (Optional[String])
  • smtpd_timeout (Optional[String])
  • smtpd_tls_cafile (Optional[String])
  • smtpd_tls_capath (Optional[String])
  • smtpd_tls_always_issue_session_ids (Optional[Variant[Boolean, String]])
  • smtpd_tls_ask_ccert (Optional[Variant[Boolean, String]])
  • smtpd_tls_auth_only (Optional[Variant[Boolean, String]])
  • smtpd_tls_ccert_verifydepth (Optional[String])
  • smtpd_tls_cert_file (Optional[String])
  • smtpd_tls_ciphers (Optional[String])
  • smtpd_tls_dcert_file (Optional[String])
  • smtpd_tls_dh1024_param_file (Optional[String])
  • smtpd_tls_dh512_param_file (Optional[String])
  • smtpd_tls_dkey_file (Optional[String])
  • smtpd_tls_eccert_file (Optional[String])
  • smtpd_tls_eckey_file (Optional[String])
  • smtpd_tls_eecdh_grade (Optional[String])
  • smtpd_tls_exclude_ciphers (Optional[Array[String, 1]])
  • smtpd_tls_fingerprint_digest (Optional[String])
  • smtpd_tls_key_file (Optional[String])
  • smtpd_tls_loglevel (Optional[String])
  • smtpd_tls_mandatory_ciphers (Optional[String])
  • smtpd_tls_mandatory_exclude_ciphers (Optional[Array[String, 1]])
  • smtpd_tls_mandatory_protocols (Optional[Array[String, 1]])
  • smtpd_tls_protocols (Optional[Array[String, 1]])
  • smtpd_tls_received_header (Optional[Variant[Boolean, String]])
  • smtpd_tls_req_ccert (Optional[Variant[Boolean, String]])
  • smtpd_tls_security_level (Optional[String])
  • smtpd_tls_session_cache_database (Optional[String])
  • smtpd_tls_session_cache_timeout (Optional[String])
  • smtpd_tls_wrappermode (Optional[Variant[Boolean, String]])
  • smtpd_upstream_proxy_protocol (Optional[String])
  • smtpd_upstream_proxy_timeout (Optional[String])
  • smtpd_use_tls (Optional[Variant[Boolean, String]])
  • soft_bounce (Optional[Variant[Boolean, String]])
  • stale_lock_time (Optional[String])
  • strict_7bit_headers (Optional[Variant[Boolean, String]])
  • strict_8bitmime (Optional[Variant[Boolean, String]])
  • strict_8bitmime_body (Optional[Variant[Boolean, String]])
  • strict_mailbox_ownership (Optional[Variant[Boolean, String]])
  • strict_mime_encoding_domain (Optional[Variant[Boolean, String]])
  • strict_rfc821_envelopes (Optional[Variant[Boolean, String]])
  • sun_mailtool_compatibility (Optional[Variant[Boolean, String]])
  • swap_bangpath (Optional[Variant[Boolean, String]])
  • syslog_facility (Optional[String])
  • syslog_name (Optional[String])
  • tcp_windowsize (Optional[String])
  • tls_append_default_ca (Optional[Variant[Boolean, String]])
  • tls_daemon_random_bytes (Optional[String])
  • tls_disable_workarounds (Optional[Array[String, 1]])
  • tls_eecdh_strong_curve (Optional[String])
  • tls_eecdh_ultra_curve (Optional[String])
  • tls_export_cipherlist (Optional[String])
  • tls_high_cipherlist (Optional[String])
  • tls_legacy_public_key_fingerprints (Optional[Variant[Boolean, String]])
  • tls_low_cipherlist (Optional[String])
  • tls_medium_cipherlist (Optional[String])
  • tls_null_cipherlist (Optional[String])
  • tls_preempt_cipherlist (Optional[Variant[Boolean, String]])
  • tls_random_bytes (Optional[String])
  • tls_random_exchange_name (Optional[String])
  • tls_random_prng_update_period (Optional[String])
  • tls_random_reseed_period (Optional[String])
  • tls_random_source (Optional[String])
  • tlsproxy_enforce_tls (Optional[String])
  • tlsproxy_service_name (Optional[String])
  • tlsproxy_tls_cafile (Optional[String])
  • tlsproxy_tls_capath (Optional[String])
  • tlsproxy_tls_always_issue_session_ids (Optional[Variant[Boolean, String]])
  • tlsproxy_tls_ask_ccert (Optional[Variant[Boolean, String]])
  • tlsproxy_tls_ccert_verifydepth (Optional[String])
  • tlsproxy_tls_cert_file (Optional[String])
  • tlsproxy_tls_ciphers (Optional[String])
  • tlsproxy_tls_dcert_file (Optional[String])
  • tlsproxy_tls_dh1024_param_file (Optional[String])
  • tlsproxy_tls_dh512_param_file (Optional[String])
  • tlsproxy_tls_dkey_file (Optional[String])
  • tlsproxy_tls_eccert_file (Optional[String])
  • tlsproxy_tls_eckey_file (Optional[String])
  • tlsproxy_tls_eecdh_grade (Optional[String])
  • tlsproxy_tls_exclude_ciphers (Optional[Array[String, 1]])
  • tlsproxy_tls_fingerprint_digest (Optional[String])
  • tlsproxy_tls_key_file (Optional[String])
  • tlsproxy_tls_loglevel (Optional[String])
  • tlsproxy_tls_mandatory_ciphers (Optional[String])
  • tlsproxy_tls_mandatory_exclude_ciphers (Optional[Array[String, 1]])
  • tlsproxy_tls_mandatory_protocols (Optional[Array[String, 1]])
  • tlsproxy_tls_protocols (Optional[Array[String, 1]])
  • tlsproxy_tls_req_ccert (Optional[Variant[Boolean, String]])
  • tlsproxy_tls_security_level (Optional[String])
  • tlsproxy_tls_session_cache_timeout (Optional[String])
  • tlsproxy_use_tls (Optional[Variant[Boolean, String]])
  • tlsproxy_watchdog_timeout (Optional[String])
  • trace_service_name (Optional[String])
  • transport_maps (Optional[Array[String, 1]])
  • transport_retry_time (Optional[String])
  • trigger_timeout (Optional[String])
  • undisclosed_recipients_header (Optional[String])
  • unknown_address_reject_code (Optional[String])
  • unknown_address_tempfail_action (Optional[String])
  • unknown_client_reject_code (Optional[String])
  • unknown_helo_hostname_tempfail_action (Optional[String])
  • unknown_hostname_reject_code (Optional[String])
  • unknown_local_recipient_reject_code (Optional[String])
  • unknown_relay_recipient_reject_code (Optional[String])
  • unknown_virtual_alias_reject_code (Optional[String])
  • unknown_virtual_mailbox_reject_code (Optional[String])
  • unverified_recipient_defer_code (Optional[String])
  • unverified_recipient_reject_code (Optional[String])
  • unverified_recipient_reject_reason (Optional[String])
  • unverified_recipient_tempfail_action (Optional[String])
  • unverified_sender_defer_code (Optional[String])
  • unverified_sender_reject_code (Optional[String])
  • unverified_sender_reject_reason (Optional[String])
  • unverified_sender_tempfail_action (Optional[String])
  • verp_delimiter_filter (Optional[String])
  • virtual_alias_domains (Optional[Array[String, 1]])
  • virtual_alias_expansion_limit (Optional[String])
  • virtual_alias_maps (Optional[Array[String, 1]])
  • virtual_alias_recursion_limit (Optional[String])
  • virtual_gid_maps (Optional[Array[String, 1]])
  • virtual_mailbox_base (Optional[String])
  • virtual_mailbox_domains (Optional[Array[String, 1]])
  • virtual_mailbox_limit (Optional[String])
  • virtual_mailbox_lock (Optional[Array[String, 1]])
  • virtual_mailbox_maps (Optional[Array[String, 1]])
  • virtual_minimum_uid (Optional[String])
  • virtual_transport (Optional[String])
  • virtual_uid_maps (Optional[Array[String, 1]])

See Also:

Since:

  • 1.0.0



778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
 
# File 'manifests/init.pp', line 778

class postfix (
  Stdlib::Absolutepath                $conf_dir,
  Hash[String, Hash[String, Any]]     $services,
  Hash[Postfix::Type::Lookup, String] $lookup_packages,
  String                              $package_name,
  String                              $service_name,
  # main.cf parameters below
  Optional[String]                    $twobounce_notice_recipient,
  Optional[String]                    $access_map_defer_code,
  Optional[String]                    $access_map_reject_code,
  Optional[String]                    $address_verify_cache_cleanup_interval,
  Optional[String]                    $address_verify_default_transport,
  Optional[String]                    $address_verify_local_transport,
  Optional[String]                    $address_verify_map,
  Optional[Variant[Boolean, String]]  $address_verify_negative_cache,
  Optional[String]                    $address_verify_negative_expire_time,
  Optional[String]                    $address_verify_negative_refresh_time,
  Optional[String]                    $address_verify_poll_count,
  Optional[String]                    $address_verify_poll_delay,
  Optional[String]                    $address_verify_positive_expire_time,
  Optional[String]                    $address_verify_positive_refresh_time,
  Optional[String]                    $address_verify_relay_transport,
  Optional[String]                    $address_verify_relayhost,
  Optional[String]                    $address_verify_sender,
  Optional[Array[String, 1]]          $address_verify_sender_dependent_default_transport_maps,
  Optional[Array[String, 1]]          $address_verify_sender_dependent_relayhost_maps,
  Optional[String]                    $address_verify_sender_ttl,
  Optional[String]                    $address_verify_service_name,
  Optional[Array[String, 1]]          $address_verify_transport_maps,
  Optional[String]                    $address_verify_virtual_transport,
  Optional[Array[String, 1]]          $alias_database,
  Optional[Array[String, 1]]          $alias_maps,
  Optional[Array[String, 1]]          $allow_mail_to_commands,
  Optional[Array[String, 1]]          $allow_mail_to_files,
  Optional[Variant[Boolean, String]]  $allow_min_user,
  Optional[Variant[Boolean, String]]  $allow_percent_hack,
  Optional[Variant[Boolean, String]]  $allow_untrusted_routing,
  Optional[Array[String, 1]]          $alternate_config_directories,
  Optional[Variant[Boolean, String]]  $always_add_missing_headers,
  Optional[String]                    $always_bcc,
  Optional[String]                    $anvil_rate_time_unit,
  Optional[String]                    $anvil_status_update_time,
  Optional[Variant[Boolean, String]]  $append_at_myorigin,
  Optional[Variant[Boolean, String]]  $append_dot_mydomain,
  Optional[String]                    $application_event_drain_time,
  Optional[Array[String, 1]]          $authorized_flush_users,
  Optional[Array[String, 1]]          $authorized_mailq_users,
  Optional[Array[String, 1]]          $authorized_submit_users,
  Optional[Variant[Boolean, String]]  $backwards_bounce_logfile_compatibility,
  Optional[String]                    $berkeley_db_create_buffer_size,
  Optional[String]                    $berkeley_db_read_buffer_size,
  Optional[String]                    $best_mx_transport,
  Optional[Variant[Boolean, String]]  $biff,
  Optional[Array[String, 1]]          $body_checks,
  Optional[String]                    $body_checks_size_limit,
  Optional[String]                    $bounce_notice_recipient,
  Optional[String]                    $bounce_queue_lifetime,
  Optional[String]                    $bounce_service_name,
  Optional[String]                    $bounce_size_limit,
  Optional[String]                    $bounce_template_file,
  Optional[Variant[Boolean, String]]  $broken_sasl_auth_clients,
  Optional[Array[String, 1]]          $canonical_classes,
  Optional[Array[String, 1]]          $canonical_maps,
  Optional[String]                    $cleanup_service_name,
  Optional[String]                    $command_directory,
  Optional[String]                    $command_execution_directory,
  Optional[String]                    $command_expansion_filter,
  Optional[String]                    $command_time_limit,
  Optional[String]                    $compatibility_level,
  Optional[String]                    $config_directory,
  Optional[String]                    $connection_cache_protocol_timeout,
  Optional[String]                    $connection_cache_service_name,
  Optional[String]                    $connection_cache_status_update_time,
  Optional[String]                    $connection_cache_ttl_limit,
  Optional[String]                    $content_filter,
  Optional[Array[String, 1]]          $cyrus_sasl_config_path,
  Optional[String]                    $daemon_directory,
  Optional[Variant[Boolean, String]]  $daemon_table_open_error_is_fatal,
  Optional[String]                    $daemon_timeout,
  Optional[String]                    $data_directory,
  Optional[String]                    $debug_peer_level,
  Optional[Array[String, 1]]          $debug_peer_list,
  Optional[String]                    $debugger_command,
  Postfix::Type::Lookup::Database     $default_database_type,
  Optional[String]                    $default_delivery_slot_cost,
  Optional[String]                    $default_delivery_slot_discount,
  Optional[String]                    $default_delivery_slot_loan,
  Optional[String]                    $default_destination_concurrency_failed_cohort_limit,
  Optional[String]                    $default_destination_concurrency_limit,
  Optional[String]                    $default_destination_concurrency_negative_feedback,
  Optional[String]                    $default_destination_concurrency_positive_feedback,
  Optional[String]                    $default_destination_rate_delay,
  Optional[String]                    $default_destination_recipient_limit,
  Optional[String]                    $default_extra_recipient_limit,
  Optional[String]                    $default_filter_nexthop,
  Optional[String]                    $default_minimum_delivery_slots,
  Optional[String]                    $default_privs,
  Optional[String]                    $default_process_limit,
  Optional[String]                    $default_rbl_reply,
  Optional[String]                    $default_recipient_limit,
  Optional[String]                    $default_recipient_refill_delay,
  Optional[String]                    $default_recipient_refill_limit,
  Optional[String]                    $default_transport,
  Optional[String]                    $default_verp_delimiters,
  Optional[String]                    $defer_code,
  Optional[String]                    $defer_service_name,
  Optional[Array[String, 1]]          $defer_transports,
  Optional[String]                    $delay_logging_resolution_limit,
  Optional[String]                    $delay_notice_recipient,
  Optional[String]                    $delay_warning_time,
  Optional[String]                    $deliver_lock_attempts,
  Optional[String]                    $deliver_lock_delay,
  Optional[Variant[Boolean, String]]  $destination_concurrency_feedback_debug,
  Optional[Variant[Boolean, String]]  $detect_8bit_encoding_header,
  Optional[Variant[Boolean, String]]  $disable_dns_lookups,
  Optional[Variant[Boolean, String]]  $disable_mime_input_processing,
  Optional[Variant[Boolean, String]]  $disable_mime_output_conversion,
  Optional[Variant[Boolean, String]]  $disable_verp_bounces,
  Optional[Variant[Boolean, String]]  $disable_vrfy_command,
  Optional[String]                    $dnsblog_reply_delay,
  Optional[String]                    $dnsblog_service_name,
  Optional[String]                    $dont_remove,
  Optional[String]                    $double_bounce_sender,
  Optional[String]                    $duplicate_filter_limit,
  Optional[String]                    $empty_address_default_transport_maps_lookup_key,
  Optional[String]                    $empty_address_recipient,
  Optional[String]                    $empty_address_relayhost_maps_lookup_key,
  Optional[Variant[Boolean, String]]  $enable_long_queue_ids,
  Optional[Variant[Boolean, String]]  $enable_original_recipient,
  Optional[String]                    $error_notice_recipient,
  Optional[String]                    $error_service_name,
  Optional[String]                    $execution_directory_expansion_filter,
  Optional[Variant[Boolean, String]]  $expand_owner_alias,
  Optional[Array[String, 1]]          $export_environment,
  Optional[String]                    $fallback_transport,
  Optional[Array[String, 1]]          $fallback_transport_maps,
  Optional[Array[String, 1]]          $fast_flush_domains,
  Optional[String]                    $fast_flush_purge_time,
  Optional[String]                    $fast_flush_refresh_time,
  Optional[String]                    $fault_injection_code,
  Optional[String]                    $flush_service_name,
  Optional[String]                    $fork_attempts,
  Optional[String]                    $fork_delay,
  Optional[String]                    $forward_expansion_filter,
  Optional[Array[String, 1]]          $forward_path,
  Optional[Variant[Boolean, String]]  $frozen_delivered_to,
  Optional[String]                    $hash_queue_depth,
  Optional[Array[String, 1]]          $hash_queue_names,
  Optional[String]                    $header_address_token_limit,
  Optional[Array[String, 1]]          $header_checks,
  Optional[String]                    $header_size_limit,
  Optional[Variant[Boolean, String]]  $helpful_warnings,
  Optional[String]                    $home_mailbox,
  Optional[String]                    $hopcount_limit,
  Optional[Variant[Boolean, String]]  $html_directory,
  Optional[Variant[Boolean, String]]  $ignore_mx_lookup_error,
  Optional[Array[String, 1]]          $import_environment,
  Optional[String]                    $in_flow_delay,
  Optional[Array[String, 1]]          $inet_interfaces,
  Optional[Array[String, 1]]          $inet_protocols,
  Optional[String]                    $initial_destination_concurrency,
  Optional[Array[String, 1]]          $internal_mail_filter_classes,
  Optional[String]                    $invalid_hostname_reject_code,
  Optional[String]                    $ipc_idle,
  Optional[String]                    $ipc_timeout,
  Optional[String]                    $ipc_ttl,
  Optional[String]                    $line_length_limit,
  Optional[String]                    $lmtp_address_preference,
  Optional[Variant[Boolean, String]]  $lmtp_assume_final,
  Optional[String]                    $lmtp_bind_address,
  Optional[String]                    $lmtp_bind_address6,
  Optional[Array[String, 1]]          $lmtp_body_checks,
  Optional[Variant[Boolean, String]]  $lmtp_cname_overrides_servername,
  Optional[String]                    $lmtp_connect_timeout,
  Optional[Array[String, 1]]          $lmtp_connection_cache_destinations,
  Optional[Variant[Boolean, String]]  $lmtp_connection_cache_on_demand,
  Optional[String]                    $lmtp_connection_cache_time_limit,
  Optional[String]                    $lmtp_connection_reuse_time_limit,
  Optional[String]                    $lmtp_data_done_timeout,
  Optional[String]                    $lmtp_data_init_timeout,
  Optional[String]                    $lmtp_data_xfer_timeout,
  Optional[Variant[Boolean, String]]  $lmtp_defer_if_no_mx_address_found,
  Optional[Array[String, 1]]          $lmtp_discard_lhlo_keyword_address_maps,
  Optional[Array[String, 1]]          $lmtp_discard_lhlo_keywords,
  Optional[Array[String, 1]]          $lmtp_dns_resolver_options,
  Optional[Variant[Boolean, String]]  $lmtp_enforce_tls,
  Optional[Array[String, 1]]          $lmtp_generic_maps,
  Optional[Array[String, 1]]          $lmtp_header_checks,
  Optional[Array[String, 1]]          $lmtp_host_lookup,
  Optional[String]                    $lmtp_lhlo_name,
  Optional[String]                    $lmtp_lhlo_timeout,
  Optional[String]                    $lmtp_line_length_limit,
  Optional[String]                    $lmtp_mail_timeout,
  Optional[Array[String, 1]]          $lmtp_mime_header_checks,
  Optional[String]                    $lmtp_mx_address_limit,
  Optional[String]                    $lmtp_mx_session_limit,
  Optional[Array[String, 1]]          $lmtp_nested_header_checks,
  Optional[Variant[Boolean, String]]  $lmtp_per_record_deadline,
  Optional[String]                    $lmtp_pix_workaround_delay_time,
  Optional[Array[String, 1]]          $lmtp_pix_workaround_maps,
  Optional[String]                    $lmtp_pix_workaround_threshold_time,
  Optional[Array[String, 1]]          $lmtp_pix_workarounds,
  Optional[String]                    $lmtp_quit_timeout,
  Optional[Variant[Boolean, String]]  $lmtp_quote_rfc821_envelope,
  Optional[Variant[Boolean, String]]  $lmtp_randomize_addresses,
  Optional[String]                    $lmtp_rcpt_timeout,
  Optional[String]                    $lmtp_reply_filter,
  Optional[String]                    $lmtp_rset_timeout,
  Optional[String]                    $lmtp_sasl_auth_cache_name,
  Optional[String]                    $lmtp_sasl_auth_cache_time,
  Optional[Variant[Boolean, String]]  $lmtp_sasl_auth_enable,
  Optional[Variant[Boolean, String]]  $lmtp_sasl_auth_soft_bounce,
  Optional[Array[String, 1]]          $lmtp_sasl_mechanism_filter,
  Optional[Array[String, 1]]          $lmtp_sasl_password_maps,
  Optional[String]                    $lmtp_sasl_path,
  Optional[Array[String, 1]]          $lmtp_sasl_security_options,
  Optional[Array[String, 1]]          $lmtp_sasl_tls_security_options,
  Optional[Array[String, 1]]          $lmtp_sasl_tls_verified_security_options,
  Optional[String]                    $lmtp_sasl_type,
  Optional[Variant[Boolean, String]]  $lmtp_send_dummy_mail_auth,
  Optional[Variant[Boolean, String]]  $lmtp_send_xforward_command,
  Optional[Variant[Boolean, String]]  $lmtp_sender_dependent_authentication,
  Optional[Variant[Boolean, String]]  $lmtp_skip_5xx_greeting,
  Optional[Variant[Boolean, String]]  $lmtp_skip_quit_response,
  Optional[String]                    $lmtp_starttls_timeout,
  Optional[String]                    $lmtp_tcp_port,
  Optional[String]                    $lmtp_tls_cafile,
  Optional[String]                    $lmtp_tls_capath,
  Optional[Variant[Boolean, String]]  $lmtp_tls_block_early_mail_reply,
  Optional[String]                    $lmtp_tls_cert_file,
  Optional[String]                    $lmtp_tls_ciphers,
  Optional[String]                    $lmtp_tls_dcert_file,
  Optional[String]                    $lmtp_tls_dkey_file,
  Optional[String]                    $lmtp_tls_eccert_file,
  Optional[String]                    $lmtp_tls_eckey_file,
  Optional[Variant[Boolean, String]]  $lmtp_tls_enforce_peername,
  Optional[Array[String, 1]]          $lmtp_tls_exclude_ciphers,
  Optional[Array[String, 1]]          $lmtp_tls_fingerprint_cert_match,
  Optional[String]                    $lmtp_tls_fingerprint_digest,
  Optional[String]                    $lmtp_tls_key_file,
  Optional[String]                    $lmtp_tls_loglevel,
  Optional[String]                    $lmtp_tls_mandatory_ciphers,
  Optional[Array[String, 1]]          $lmtp_tls_mandatory_exclude_ciphers,
  Optional[Array[String, 1]]          $lmtp_tls_mandatory_protocols,
  Optional[Variant[Boolean, String]]  $lmtp_tls_note_starttls_offer,
  Optional[Array[String, 1]]          $lmtp_tls_per_site,
  Optional[Array[String, 1]]          $lmtp_tls_policy_maps,
  Optional[Array[String, 1]]          $lmtp_tls_protocols,
  Optional[String]                    $lmtp_tls_scert_verifydepth,
  Optional[Array[String, 1]]          $lmtp_tls_secure_cert_match,
  Optional[String]                    $lmtp_tls_security_level,
  Optional[String]                    $lmtp_tls_session_cache_database,
  Optional[String]                    $lmtp_tls_session_cache_timeout,
  Optional[Array[String, 1]]          $lmtp_tls_verify_cert_match,
  Optional[Variant[Boolean, String]]  $lmtp_use_tls,
  Optional[String]                    $lmtp_xforward_timeout,
  Optional[String]                    $local_command_shell,
  Optional[Array[String, 1]]          $local_header_rewrite_clients,
  Optional[Array[String, 1]]          $local_recipient_maps,
  Optional[String]                    $local_transport,
  Optional[String]                    $luser_relay,
  Optional[String]                    $mail_name,
  Optional[String]                    $mail_owner,
  Optional[String]                    $mail_release_date,
  Optional[String]                    $mail_spool_directory,
  Optional[String]                    $mail_version,
  Optional[String]                    $mailbox_command,
  Optional[Array[String, 1]]          $mailbox_command_maps,
  Optional[Array[String, 1]]          $mailbox_delivery_lock,
  Optional[String]                    $mailbox_size_limit,
  Optional[String]                    $mailbox_transport,
  Optional[Array[String, 1]]          $mailbox_transport_maps,
  Optional[String]                    $mailq_path,
  Optional[String]                    $manpage_directory,
  Optional[Array[String, 1]]          $maps_rbl_domains,
  Optional[String]                    $maps_rbl_reject_code,
  Optional[Array[String, 1]]          $masquerade_classes,
  Optional[Array[String, 1]]          $masquerade_domains,
  Optional[Array[String, 1]]          $masquerade_exceptions,
  Optional[Array[String, 1]]          $master_service_disable,
  Optional[String]                    $max_idle,
  Optional[String]                    $max_use,
  Optional[String]                    $maximal_backoff_time,
  Optional[String]                    $maximal_queue_lifetime,
  Optional[String]                    $message_reject_characters,
  Optional[String]                    $message_size_limit,
  Optional[String]                    $message_strip_characters,
  Optional[String]                    $meta_directory,
  Optional[String]                    $milter_command_timeout,
  Optional[String]                    $milter_connect_macros,
  Optional[String]                    $milter_connect_timeout,
  Optional[String]                    $milter_content_timeout,
  Optional[String]                    $milter_data_macros,
  Optional[String]                    $milter_default_action,
  Optional[String]                    $milter_end_of_data_macros,
  Optional[String]                    $milter_end_of_header_macros,
  Optional[Array[String, 1]]          $milter_header_checks,
  Optional[String]                    $milter_helo_macros,
  Optional[String]                    $milter_macro_daemon_name,
  Optional[String]                    $milter_macro_v,
  Optional[String]                    $milter_mail_macros,
  Optional[String]                    $milter_protocol,
  Optional[String]                    $milter_rcpt_macros,
  Optional[String]                    $milter_unknown_command_macros,
  Optional[String]                    $mime_boundary_length_limit,
  Optional[Array[String, 1]]          $mime_header_checks,
  Optional[String]                    $mime_nesting_limit,
  Optional[String]                    $minimal_backoff_time,
  Optional[Array[String, 1]]          $multi_instance_directories,
  Optional[Variant[Boolean, String]]  $multi_instance_enable,
  Optional[String]                    $multi_instance_group,
  Optional[String]                    $multi_instance_name,
  Optional[String]                    $multi_instance_wrapper,
  Optional[String]                    $multi_recipient_bounce_reject_code,
  Optional[Array[String, 1]]          $mydestination,
  Optional[String]                    $mydomain,
  Optional[String]                    $myhostname,
  Optional[Array[String, 1]]          $mynetworks,
  Optional[String]                    $mynetworks_style,
  Optional[String]                    $myorigin,
  Optional[Array[String, 1]]          $nested_header_checks,
  Optional[String]                    $newaliases_path,
  Optional[String]                    $non_fqdn_reject_code,
  Optional[Array[String, 1]]          $non_smtpd_milters,
  Optional[Array[String, 1]]          $notify_classes,
  Optional[Variant[Boolean, String]]  $owner_request_special,
  Optional[Array[String, 1]]          $parent_domain_matches_subdomains,
  Optional[Array[String, 1]]          $permit_mx_backup_networks,
  Optional[String]                    $pickup_service_name,
  Optional[String]                    $plaintext_reject_code,
  Optional[Array[String, 1]]          $postmulti_control_commands,
  Optional[Array[String, 1]]          $postmulti_start_commands,
  Optional[Array[String, 1]]          $postmulti_stop_commands,
  Optional[Array[String, 1]]          $postscreen_access_list,
  Optional[String]                    $postscreen_bare_newline_action,
  Optional[Variant[Boolean, String]]  $postscreen_bare_newline_enable,
  Optional[String]                    $postscreen_bare_newline_ttl,
  Optional[String]                    $postscreen_blacklist_action,
  Optional[String]                    $postscreen_cache_cleanup_interval,
  Optional[String]                    $postscreen_cache_map,
  Optional[String]                    $postscreen_cache_retention_time,
  Optional[String]                    $postscreen_client_connection_count_limit,
  Optional[String]                    $postscreen_command_count_limit,
  Optional[String]                    $postscreen_command_filter,
  Optional[String]                    $postscreen_command_time_limit,
  Optional[Variant[Boolean, String]]  $postscreen_disable_vrfy_command,
  Optional[Array[String, 1]]          $postscreen_discard_ehlo_keyword_address_maps,
  Optional[Array[String, 1]]          $postscreen_discard_ehlo_keywords,
  Optional[String]                    $postscreen_dnsbl_action,
  Optional[String]                    $postscreen_dnsbl_reply_map,
  Optional[Array[String, 1]]          $postscreen_dnsbl_sites,
  Optional[String]                    $postscreen_dnsbl_threshold,
  Optional[String]                    $postscreen_dnsbl_ttl,
  Optional[Variant[Boolean, String]]  $postscreen_enforce_tls,
  Optional[String]                    $postscreen_expansion_filter,
  Optional[Array[String, 1]]          $postscreen_forbidden_commands,
  Optional[String]                    $postscreen_greet_action,
  Optional[String]                    $postscreen_greet_banner,
  Optional[String]                    $postscreen_greet_ttl,
  Optional[String]                    $postscreen_greet_wait,
  Optional[Variant[Boolean, String]]  $postscreen_helo_required,
  Optional[String]                    $postscreen_non_smtp_command_action,
  Optional[Variant[Boolean, String]]  $postscreen_non_smtp_command_enable,
  Optional[String]                    $postscreen_non_smtp_command_ttl,
  Optional[String]                    $postscreen_pipelining_action,
  Optional[Variant[Boolean, String]]  $postscreen_pipelining_enable,
  Optional[String]                    $postscreen_pipelining_ttl,
  Optional[String]                    $postscreen_post_queue_limit,
  Optional[String]                    $postscreen_pre_queue_limit,
  Optional[String]                    $postscreen_reject_footer,
  Optional[String]                    $postscreen_tls_security_level,
  Optional[String]                    $postscreen_upstream_proxy_protocol,
  Optional[String]                    $postscreen_upstream_proxy_timeout,
  Optional[Variant[Boolean, String]]  $postscreen_use_tls,
  Optional[String]                    $postscreen_watchdog_timeout,
  Optional[Array[String, 1]]          $postscreen_whitelist_interfaces,
  Optional[Array[String, 1]]          $prepend_delivered_header,
  Optional[String]                    $process_id_directory,
  Optional[Array[String, 1]]          $propagate_unmatched_extensions,
  Optional[Array[String, 1]]          $proxy_interfaces,
  Optional[Array[String, 1]]          $proxy_read_maps,
  Optional[Array[String, 1]]          $proxy_write_maps,
  Optional[String]                    $proxymap_service_name,
  Optional[String]                    $proxywrite_service_name,
  Optional[String]                    $qmgr_clog_warn_time,
  Optional[String]                    $qmgr_daemon_timeout,
  Optional[String]                    $qmgr_fudge_factor,
  Optional[String]                    $qmgr_ipc_timeout,
  Optional[String]                    $qmgr_message_active_limit,
  Optional[String]                    $qmgr_message_recipient_limit,
  Optional[String]                    $qmgr_message_recipient_minimum,
  Optional[Array[String, 1]]          $qmqpd_authorized_clients,
  Optional[Variant[Boolean, String]]  $qmqpd_client_port_logging,
  Optional[String]                    $qmqpd_error_delay,
  Optional[String]                    $qmqpd_timeout,
  Optional[String]                    $queue_directory,
  Optional[String]                    $queue_file_attribute_count_limit,
  Optional[String]                    $queue_minfree,
  Optional[String]                    $queue_run_delay,
  Optional[String]                    $queue_service_name,
  Optional[Array[String, 1]]          $rbl_reply_maps,
  Optional[Variant[Boolean, String]]  $readme_directory,
  Optional[Array[String, 1]]          $receive_override_options,
  Optional[Array[String, 1]]          $recipient_bcc_maps,
  Optional[Array[String, 1]]          $recipient_canonical_classes,
  Optional[Array[String, 1]]          $recipient_canonical_maps,
  Optional[String]                    $recipient_delimiter,
  Optional[String]                    $reject_code,
  Optional[String]                    $reject_tempfail_action,
  Optional[Array[String, 1]]          $relay_clientcerts,
  Optional[Array[String, 1]]          $relay_domains,
  Optional[String]                    $relay_domains_reject_code,
  Optional[Array[String, 1]]          $relay_recipient_maps,
  Optional[String]                    $relay_transport,
  Optional[String]                    $relayhost,
  Optional[Array[String, 1]]          $relocated_maps,
  Optional[String]                    $remote_header_rewrite_domain,
  Optional[Variant[Boolean, String]]  $require_home_directory,
  Optional[Variant[Boolean, String]]  $reset_owner_alias,
  Optional[Variant[Boolean, String]]  $resolve_dequoted_address,
  Optional[Variant[Boolean, String]]  $resolve_null_domain,
  Optional[Variant[Boolean, String]]  $resolve_numeric_domain,
  Optional[String]                    $rewrite_service_name,
  Optional[String]                    $sample_directory,
  Optional[Variant[Boolean, String]]  $send_cyrus_sasl_authzid,
  Optional[Array[String, 1]]          $sender_bcc_maps,
  Optional[Array[String, 1]]          $sender_canonical_classes,
  Optional[Array[String, 1]]          $sender_canonical_maps,
  Optional[Array[String, 1]]          $sender_dependent_default_transport_maps,
  Optional[Array[String, 1]]          $sender_dependent_relayhost_maps,
  Optional[String]                    $sendmail_fix_line_endings,
  Optional[String]                    $sendmail_path,
  Optional[String]                    $service_throttle_time,
  Optional[String]                    $setgid_group,
  Optional[Variant[Boolean, String]]  $shlib_directory,
  Optional[Variant[Boolean, String]]  $show_user_unknown_table_name,
  Optional[String]                    $showq_service_name,
  Optional[String]                    $smtp_address_preference,
  Optional[Variant[Boolean, String]]  $smtp_always_send_ehlo,
  Optional[String]                    $smtp_bind_address,
  Optional[String]                    $smtp_bind_address6,
  Optional[Array[String, 1]]          $smtp_body_checks,
  Optional[Variant[Boolean, String]]  $smtp_cname_overrides_servername,
  Optional[String]                    $smtp_connect_timeout,
  Optional[Array[String, 1]]          $smtp_connection_cache_destinations,
  Optional[Variant[Boolean, String]]  $smtp_connection_cache_on_demand,
  Optional[String]                    $smtp_connection_cache_time_limit,
  Optional[String]                    $smtp_connection_reuse_time_limit,
  Optional[String]                    $smtp_data_done_timeout,
  Optional[String]                    $smtp_data_init_timeout,
  Optional[String]                    $smtp_data_xfer_timeout,
  Optional[Variant[Boolean, String]]  $smtp_defer_if_no_mx_address_found,
  Optional[Array[String, 1]]          $smtp_discard_ehlo_keyword_address_maps,
  Optional[Array[String, 1]]          $smtp_discard_ehlo_keywords,
  Optional[Array[String, 1]]          $smtp_dns_resolver_options,
  Optional[Variant[Boolean, String]]  $smtp_enforce_tls,
  Optional[Array[String, 1]]          $smtp_fallback_relay,
  Optional[Array[String, 1]]          $smtp_generic_maps,
  Optional[Array[String, 1]]          $smtp_header_checks,
  Optional[String]                    $smtp_helo_name,
  Optional[String]                    $smtp_helo_timeout,
  Optional[Array[String, 1]]          $smtp_host_lookup,
  Optional[String]                    $smtp_line_length_limit,
  Optional[String]                    $smtp_mail_timeout,
  Optional[Array[String, 1]]          $smtp_mime_header_checks,
  Optional[String]                    $smtp_mx_address_limit,
  Optional[String]                    $smtp_mx_session_limit,
  Optional[Array[String, 1]]          $smtp_nested_header_checks,
  Optional[Variant[Boolean, String]]  $smtp_never_send_ehlo,
  Optional[Variant[Boolean, String]]  $smtp_per_record_deadline,
  Optional[String]                    $smtp_pix_workaround_delay_time,
  Optional[Array[String, 1]]          $smtp_pix_workaround_maps,
  Optional[String]                    $smtp_pix_workaround_threshold_time,
  Optional[Array[String, 1]]          $smtp_pix_workarounds,
  Optional[String]                    $smtp_quit_timeout,
  Optional[Variant[Boolean, String]]  $smtp_quote_rfc821_envelope,
  Optional[Variant[Boolean, String]]  $smtp_randomize_addresses,
  Optional[String]                    $smtp_rcpt_timeout,
  Optional[String]                    $smtp_reply_filter,
  Optional[String]                    $smtp_rset_timeout,
  Optional[String]                    $smtp_sasl_auth_cache_name,
  Optional[String]                    $smtp_sasl_auth_cache_time,
  Optional[Variant[Boolean, String]]  $smtp_sasl_auth_enable,
  Optional[Variant[Boolean, String]]  $smtp_sasl_auth_soft_bounce,
  Optional[Array[String, 1]]          $smtp_sasl_mechanism_filter,
  Optional[Array[String, 1]]          $smtp_sasl_password_maps,
  Optional[String]                    $smtp_sasl_path,
  Optional[Array[String, 1]]          $smtp_sasl_security_options,
  Optional[Array[String, 1]]          $smtp_sasl_tls_security_options,
  Optional[Array[String, 1]]          $smtp_sasl_tls_verified_security_options,
  Optional[String]                    $smtp_sasl_type,
  Optional[Variant[Boolean, String]]  $smtp_send_dummy_mail_auth,
  Optional[Variant[Boolean, String]]  $smtp_send_xforward_command,
  Optional[Variant[Boolean, String]]  $smtp_sender_dependent_authentication,
  Optional[Variant[Boolean, String]]  $smtp_skip_5xx_greeting,
  Optional[Variant[Boolean, String]]  $smtp_skip_quit_response,
  Optional[String]                    $smtp_starttls_timeout,
  Optional[String]                    $smtp_tls_cafile,
  Optional[String]                    $smtp_tls_capath,
  Optional[Variant[Boolean, String]]  $smtp_tls_block_early_mail_reply,
  Optional[String]                    $smtp_tls_cert_file,
  Optional[String]                    $smtp_tls_ciphers,
  Optional[String]                    $smtp_tls_dcert_file,
  Optional[String]                    $smtp_tls_dkey_file,
  Optional[String]                    $smtp_tls_eccert_file,
  Optional[String]                    $smtp_tls_eckey_file,
  Optional[Variant[Boolean, String]]  $smtp_tls_enforce_peername,
  Optional[Array[String, 1]]          $smtp_tls_exclude_ciphers,
  Optional[Array[String, 1]]          $smtp_tls_fingerprint_cert_match,
  Optional[String]                    $smtp_tls_fingerprint_digest,
  Optional[String]                    $smtp_tls_key_file,
  Optional[String]                    $smtp_tls_loglevel,
  Optional[String]                    $smtp_tls_mandatory_ciphers,
  Optional[Array[String, 1]]          $smtp_tls_mandatory_exclude_ciphers,
  Optional[Array[String, 1]]          $smtp_tls_mandatory_protocols,
  Optional[Variant[Boolean, String]]  $smtp_tls_note_starttls_offer,
  Optional[Array[String, 1]]          $smtp_tls_per_site,
  Optional[Array[String, 1]]          $smtp_tls_policy_maps,
  Optional[Array[String, 1]]          $smtp_tls_protocols,
  Optional[String]                    $smtp_tls_scert_verifydepth,
  Optional[Array[String, 1]]          $smtp_tls_secure_cert_match,
  Optional[String]                    $smtp_tls_security_level,
  Optional[String]                    $smtp_tls_session_cache_database,
  Optional[String]                    $smtp_tls_session_cache_timeout,
  Optional[Array[String, 1]]          $smtp_tls_verify_cert_match,
  Optional[Variant[Boolean, String]]  $smtp_use_tls,
  Optional[String]                    $smtp_xforward_timeout,
  Optional[Array[String, 1]]          $smtpd_authorized_verp_clients,
  Optional[Array[String, 1]]          $smtpd_authorized_xclient_hosts,
  Optional[Array[String, 1]]          $smtpd_authorized_xforward_hosts,
  Optional[String]                    $smtpd_banner,
  Optional[String]                    $smtpd_client_connection_count_limit,
  Optional[String]                    $smtpd_client_connection_rate_limit,
  Optional[Array[String, 1]]          $smtpd_client_event_limit_exceptions,
  Optional[String]                    $smtpd_client_message_rate_limit,
  Optional[String]                    $smtpd_client_new_tls_session_rate_limit,
  Optional[Variant[Boolean, String]]  $smtpd_client_port_logging,
  Optional[String]                    $smtpd_client_recipient_rate_limit,
  Optional[Array[String, 1]]          $smtpd_client_restrictions,
  Optional[String]                    $smtpd_command_filter,
  Optional[Array[String, 1]]          $smtpd_data_restrictions,
  Optional[Variant[Boolean, String]]  $smtpd_delay_open_until_valid_rcpt,
  Optional[Variant[Boolean, String]]  $smtpd_delay_reject,
  Optional[Array[String, 1]]          $smtpd_discard_ehlo_keyword_address_maps,
  Optional[Array[String, 1]]          $smtpd_discard_ehlo_keywords,
  Optional[Array[String, 1]]          $smtpd_end_of_data_restrictions,
  Optional[Variant[Boolean, String]]  $smtpd_enforce_tls,
  Optional[String]                    $smtpd_error_sleep_time,
  Optional[Array[String, 1]]          $smtpd_etrn_restrictions,
  Optional[String]                    $smtpd_expansion_filter,
  Optional[Array[String, 1]]          $smtpd_forbidden_commands,
  Optional[String]                    $smtpd_hard_error_limit,
  Optional[Variant[Boolean, String]]  $smtpd_helo_required,
  Optional[Array[String, 1]]          $smtpd_helo_restrictions,
  Optional[String]                    $smtpd_history_flush_threshold,
  Optional[String]                    $smtpd_junk_command_limit,
  Optional[String]                    $smtpd_log_access_permit_actions,
  Optional[Array[String, 1]]          $smtpd_milters,
  Optional[Array[String, 1]]          $smtpd_noop_commands,
  Optional[String]                    $smtpd_null_access_lookup_key,
  Optional[Variant[Boolean, String]]  $smtpd_peername_lookup,
  Optional[Variant[Boolean, String]]  $smtpd_per_record_deadline,
  Optional[String]                    $smtpd_policy_service_max_idle,
  Optional[String]                    $smtpd_policy_service_max_ttl,
  Optional[String]                    $smtpd_policy_service_timeout,
  Optional[String]                    $smtpd_proxy_ehlo,
  Optional[String]                    $smtpd_proxy_filter,
  Optional[Array[String, 1]]          $smtpd_proxy_options,
  Optional[String]                    $smtpd_proxy_timeout,
  Optional[String]                    $smtpd_recipient_limit,
  Optional[String]                    $smtpd_recipient_overshoot_limit,
  Optional[Array[String, 1]]          $smtpd_recipient_restrictions,
  Optional[String]                    $smtpd_reject_footer,
  Optional[Variant[Boolean, String]]  $smtpd_reject_unlisted_recipient,
  Optional[Variant[Boolean, String]]  $smtpd_reject_unlisted_sender,
  Optional[Array[String, 1]]          $smtpd_relay_restrictions,
  Optional[Array[String, 1]]          $smtpd_restriction_classes,
  Optional[Variant[Boolean, String]]  $smtpd_sasl_auth_enable,
  Optional[Variant[Boolean, String]]  $smtpd_sasl_authenticated_header,
  Optional[Array[String, 1]]          $smtpd_sasl_exceptions_networks,
  Optional[String]                    $smtpd_sasl_local_domain,
  Optional[String]                    $smtpd_sasl_path,
  Optional[Array[String, 1]]          $smtpd_sasl_security_options,
  Optional[Array[String, 1]]          $smtpd_sasl_tls_security_options,
  Optional[String]                    $smtpd_sasl_type,
  Optional[Array[String, 1]]          $smtpd_sender_login_maps,
  Optional[Array[String, 1]]          $smtpd_sender_restrictions,
  Optional[String]                    $smtpd_service_name,
  Optional[String]                    $smtpd_soft_error_limit,
  Optional[String]                    $smtpd_starttls_timeout,
  Optional[String]                    $smtpd_timeout,
  Optional[String]                    $smtpd_tls_cafile,
  Optional[String]                    $smtpd_tls_capath,
  Optional[Variant[Boolean, String]]  $smtpd_tls_always_issue_session_ids,
  Optional[Variant[Boolean, String]]  $smtpd_tls_ask_ccert,
  Optional[Variant[Boolean, String]]  $smtpd_tls_auth_only,
  Optional[String]                    $smtpd_tls_ccert_verifydepth,
  Optional[String]                    $smtpd_tls_cert_file,
  Optional[String]                    $smtpd_tls_ciphers,
  Optional[String]                    $smtpd_tls_dcert_file,
  Optional[String]                    $smtpd_tls_dh1024_param_file,
  Optional[String]                    $smtpd_tls_dh512_param_file,
  Optional[String]                    $smtpd_tls_dkey_file,
  Optional[String]                    $smtpd_tls_eccert_file,
  Optional[String]                    $smtpd_tls_eckey_file,
  Optional[String]                    $smtpd_tls_eecdh_grade,
  Optional[Array[String, 1]]          $smtpd_tls_exclude_ciphers,
  Optional[String]                    $smtpd_tls_fingerprint_digest,
  Optional[String]                    $smtpd_tls_key_file,
  Optional[String]                    $smtpd_tls_loglevel,
  Optional[String]                    $smtpd_tls_mandatory_ciphers,
  Optional[Array[String, 1]]          $smtpd_tls_mandatory_exclude_ciphers,
  Optional[Array[String, 1]]          $smtpd_tls_mandatory_protocols,
  Optional[Array[String, 1]]          $smtpd_tls_protocols,
  Optional[Variant[Boolean, String]]  $smtpd_tls_received_header,
  Optional[Variant[Boolean, String]]  $smtpd_tls_req_ccert,
  Optional[String]                    $smtpd_tls_security_level,
  Optional[String]                    $smtpd_tls_session_cache_database,
  Optional[String]                    $smtpd_tls_session_cache_timeout,
  Optional[Variant[Boolean, String]]  $smtpd_tls_wrappermode,
  Optional[String]                    $smtpd_upstream_proxy_protocol,
  Optional[String]                    $smtpd_upstream_proxy_timeout,
  Optional[Variant[Boolean, String]]  $smtpd_use_tls,
  Optional[Variant[Boolean, String]]  $soft_bounce,
  Optional[String]                    $stale_lock_time,
  Optional[Variant[Boolean, String]]  $strict_7bit_headers,
  Optional[Variant[Boolean, String]]  $strict_8bitmime,
  Optional[Variant[Boolean, String]]  $strict_8bitmime_body,
  Optional[Variant[Boolean, String]]  $strict_mailbox_ownership,
  Optional[Variant[Boolean, String]]  $strict_mime_encoding_domain,
  Optional[Variant[Boolean, String]]  $strict_rfc821_envelopes,
  Optional[Variant[Boolean, String]]  $sun_mailtool_compatibility,
  Optional[Variant[Boolean, String]]  $swap_bangpath,
  Optional[String]                    $syslog_facility,
  Optional[String]                    $syslog_name,
  Optional[String]                    $tcp_windowsize,
  Optional[Variant[Boolean, String]]  $tls_append_default_ca,
  Optional[String]                    $tls_daemon_random_bytes,
  Optional[Array[String, 1]]          $tls_disable_workarounds,
  Optional[String]                    $tls_eecdh_strong_curve,
  Optional[String]                    $tls_eecdh_ultra_curve,
  Optional[String]                    $tls_export_cipherlist,
  Optional[String]                    $tls_high_cipherlist,
  Optional[Variant[Boolean, String]]  $tls_legacy_public_key_fingerprints,
  Optional[String]                    $tls_low_cipherlist,
  Optional[String]                    $tls_medium_cipherlist,
  Optional[String]                    $tls_null_cipherlist,
  Optional[Variant[Boolean, String]]  $tls_preempt_cipherlist,
  Optional[String]                    $tls_random_bytes,
  Optional[String]                    $tls_random_exchange_name,
  Optional[String]                    $tls_random_prng_update_period,
  Optional[String]                    $tls_random_reseed_period,
  Optional[String]                    $tls_random_source,
  Optional[String]                    $tlsproxy_enforce_tls,
  Optional[String]                    $tlsproxy_service_name,
  Optional[String]                    $tlsproxy_tls_cafile,
  Optional[String]                    $tlsproxy_tls_capath,
  Optional[Variant[Boolean, String]]  $tlsproxy_tls_always_issue_session_ids,
  Optional[Variant[Boolean, String]]  $tlsproxy_tls_ask_ccert,
  Optional[String]                    $tlsproxy_tls_ccert_verifydepth,
  Optional[String]                    $tlsproxy_tls_cert_file,
  Optional[String]                    $tlsproxy_tls_ciphers,
  Optional[String]                    $tlsproxy_tls_dcert_file,
  Optional[String]                    $tlsproxy_tls_dh1024_param_file,
  Optional[String]                    $tlsproxy_tls_dh512_param_file,
  Optional[String]                    $tlsproxy_tls_dkey_file,
  Optional[String]                    $tlsproxy_tls_eccert_file,
  Optional[String]                    $tlsproxy_tls_eckey_file,
  Optional[String]                    $tlsproxy_tls_eecdh_grade,
  Optional[Array[String, 1]]          $tlsproxy_tls_exclude_ciphers,
  Optional[String]                    $tlsproxy_tls_fingerprint_digest,
  Optional[String]                    $tlsproxy_tls_key_file,
  Optional[String]                    $tlsproxy_tls_loglevel,
  Optional[String]                    $tlsproxy_tls_mandatory_ciphers,
  Optional[Array[String, 1]]          $tlsproxy_tls_mandatory_exclude_ciphers,
  Optional[Array[String, 1]]          $tlsproxy_tls_mandatory_protocols,
  Optional[Array[String, 1]]          $tlsproxy_tls_protocols,
  Optional[Variant[Boolean, String]]  $tlsproxy_tls_req_ccert,
  Optional[String]                    $tlsproxy_tls_security_level,
  Optional[String]                    $tlsproxy_tls_session_cache_timeout,
  Optional[Variant[Boolean, String]]  $tlsproxy_use_tls,
  Optional[String]                    $tlsproxy_watchdog_timeout,
  Optional[String]                    $trace_service_name,
  Optional[Array[String, 1]]          $transport_maps,
  Optional[String]                    $transport_retry_time,
  Optional[String]                    $trigger_timeout,
  Optional[String]                    $undisclosed_recipients_header,
  Optional[String]                    $unknown_address_reject_code,
  Optional[String]                    $unknown_address_tempfail_action,
  Optional[String]                    $unknown_client_reject_code,
  Optional[String]                    $unknown_helo_hostname_tempfail_action,
  Optional[String]                    $unknown_hostname_reject_code,
  Optional[String]                    $unknown_local_recipient_reject_code,
  Optional[String]                    $unknown_relay_recipient_reject_code,
  Optional[String]                    $unknown_virtual_alias_reject_code,
  Optional[String]                    $unknown_virtual_mailbox_reject_code,
  Optional[String]                    $unverified_recipient_defer_code,
  Optional[String]                    $unverified_recipient_reject_code,
  Optional[String]                    $unverified_recipient_reject_reason,
  Optional[String]                    $unverified_recipient_tempfail_action,
  Optional[String]                    $unverified_sender_defer_code,
  Optional[String]                    $unverified_sender_reject_code,
  Optional[String]                    $unverified_sender_reject_reason,
  Optional[String]                    $unverified_sender_tempfail_action,
  Optional[String]                    $verp_delimiter_filter,
  Optional[Array[String, 1]]          $virtual_alias_domains,
  Optional[String]                    $virtual_alias_expansion_limit,
  Optional[Array[String, 1]]          $virtual_alias_maps,
  Optional[String]                    $virtual_alias_recursion_limit,
  Optional[Array[String, 1]]          $virtual_gid_maps,
  Optional[String]                    $virtual_mailbox_base,
  Optional[Array[String, 1]]          $virtual_mailbox_domains,
  Optional[String]                    $virtual_mailbox_limit,
  Optional[Array[String, 1]]          $virtual_mailbox_lock,
  Optional[Array[String, 1]]          $virtual_mailbox_maps,
  Optional[String]                    $virtual_minimum_uid,
  Optional[String]                    $virtual_transport,
  Optional[Array[String, 1]]          $virtual_uid_maps,
) {

  contain postfix::install
  contain postfix::config
  contain postfix::service

  Class['postfix::install'] -> Class['postfix::config']
    ~> Class['postfix::service']
}