--- master.cf.orig	2021-04-12 20:30:45.650213781 +0200
+++ master.cf	2021-04-12 20:32:34.676882357 +0200
@@ -10,6 +10,18 @@
 #               (yes)   (yes)   (no)    (never) (100)
 # ==========================================================================
 smtp      inet  n       -       n       -       -       smtpd
+#TLS Does: STARTTLS on :25, enforced STARTTLS on :587, always TLS on :465
+#TLS   -o smtpd_tls_security_level=may
+#TLS   -o smtpd_sasl_auth_enable=no
+#TLS submission inet n       -       n       -       -       smtpd
+#TLS  -o smtpd_tls_security_level=encrypt
+#TLS  -o smtpd_sasl_auth_enable=yes
+#TLS # This was SMTPS aka :465. I use it as that.
+#TLS submissions     inet  n       -       n       -       -       smtpd
+#TLS  -o smtpd_tls_wrappermode=yes
+#TLS  -o smtpd_sasl_auth_enable=no
+tlsproxy  unix  -       -       n       -       0       tlsproxy
+   -o tlsproxy_tls_security_level=encrypt
 #smtp      inet  n       -       n       -       1       postscreen
 #smtpd     pass  -       -       n       -       -       smtpd
 #dnsblog   unix  -       -       n       -       0       dnsblog