Conditionally enable submission service

pillar.example

@@ -1,5 +1,8 @@
 postfix:
   manage_master_config: True
+  master_config:
+    enable_submission: False
+
   config:
     smtpd_banner: $myhostname ESMTP $mail_name
     biff: 'no'

postfix/files/master.cf

@@ -1,3 +1,4 @@
+{% set master_config = salt['pillar.get']('postfix:master_config', {}) -%}
 #
 # Postfix master process configuration file.  For details on the format
 # of the file, see the master(5) manual page (command: "man 5 master" or
@@ -14,6 +15,7 @@ smtp      inet  n       -       -       -       -       smtpd
 #smtpd     pass  -       -       -       -       -       smtpd
 #dnsblog   unix  -       -       -       -       0       dnsblog
 #tlsproxy  unix  -       -       -       -       0       tlsproxy
+{% if master_config.get('enable_submission', False) %}
 submission inet n       -       -       -       -       smtpd
 #  -o syslog_name=postfix/submission
   -o smtpd_tls_security_level=encrypt
@@ -25,6 +27,7 @@ submission inet n       -       -       -       -       smtpd
 #  -o smtpd_recipient_restrictions=
 #  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
 #  -o milter_macro_daemon_name=ORIGINATING
+{% endif %}
 #smtps     inet  n       -       -       -       -       smtpd
 #  -o syslog_name=postfix/smtps
 #  -o smtpd_tls_wrappermode=yes