class mail::sasl {
  # SASL
  postfix::config { "smtpd_sasl_type":                 value => 'dovecot' }
  postfix::config { "smtpd_sasl_auth_enable":          value => 'yes' }
  postfix::config { "smtpd_sasl_local_domain":         value => '$myhostname' }
  postfix::config { "smtpd_sasl_security_options":     value => 'noanonymous' }
  postfix::config { "smtpd_sasl_tls_security_options": value => 'noanonymous' }
  postfix::config { "smtpd_sasl_path":                 value => 'private/auth' }
  postfix::config { "smtpd_tls_auth_only":             value => 'yes' }
  postfix::config { "broken_sasl_auth_clients":        value => 'yes' }
}