master.cf: made submission configurable

pillar.example

@@ -2,6 +2,11 @@ postfix:
   manage_master_config: True
   master_config:
     enable_submission: False
+    # To replace the defaults use this:
+    submission:
+      smtpd_tls_security_level: encrypt
+      smtpd_sasl_auth_enable: yes
+      smtpd_client_restrictions: permit_sasl_authenticated,reject
 
   enable_service: True
 

postfix/files/master.cf

@@ -1,4 +1,13 @@
+{%- macro set_option(parameter, value) -%}
+  {%- if value is number or value is string -%}
+-o {{ parameter }}={{ value }}
+  {%- elif value is iterable -%}
+-o {{ parameter }}={{ value | join(', ')}}
+  {%- endif -%}
+{%- endmacro -%}
+
 {% set master_config = salt['pillar.get']('postfix:master_config', {}) -%}
+
 #
 # Postfix master process configuration file.  For details on the format
 # of the file, see the master(5) manual page (command: "man 5 master" or
@@ -15,11 +24,17 @@ smtp      inet  n       -       n       -       -       smtpd
 #smtpd     pass  -       -       n       -       -       smtpd
 #dnsblog   unix  -       -       n       -       0       dnsblog
 #tlsproxy  unix  -       -       n       -       0       tlsproxy
-{% if master_config.get('enable_submission', False) %}
+{%- if master_config.get('enable_submission', False) %}
 submission inet n       -       n       -       -       smtpd
+{%-  if master_config.get('submission', False) -%}
+{%     for parameter, value in master_config.get('submission', {}).items() %}
+  {{ set_option(parameter, value) }}
+{%-    endfor -%}
+{%   else %}
 #  -o syslog_name=postfix/submission
   -o smtpd_tls_security_level=encrypt
   -o smtpd_sasl_auth_enable=yes
+{%   endif %}
 #  -o smtpd_reject_unlisted_recipient=no
 #  -o smtpd_client_restrictions=$mua_client_restrictions
 #  -o smtpd_helo_restrictions=$mua_helo_restrictions
@@ -27,7 +42,7 @@ submission inet n       -       n       -       -       smtpd
 #  -o smtpd_recipient_restrictions=
 #  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
 #  -o milter_macro_daemon_name=ORIGINATING
-{% endif %}
+{% endif -%}
 #smtps     inet  n       -       n       -       -       smtpd
 #  -o syslog_name=postfix/smtps
 #  -o smtpd_tls_wrappermode=yes