add header checks, remove privacy related headers

files/header_checks

@@ -0,0 +1,5 @@
+/^Received:.*with ESMTPSA/^ 	IGNORE
+/^X-Originating-IP:/    		IGNORE
+/^X-Mailer:/            		IGNORE
+/^User-Agent:/					IGNORE
+/^Mime-Version:/        		IGNORE

tasks/main.yml

@@ -57,6 +57,13 @@
   notify:
   - restart postfix
 
+- name: Copy header_checks
+  copy:
+    src: header_checks
+    dest: /etc/postfix/header_checks
+  notify:
+    - restart postfix
+
 - name: copy postfix maps
   template:
     src: maps.j2

templates/main.cf.j2

@@ -124,8 +124,12 @@ mailbox_transport = dovecot
 virtual_alias_domains = {{ postfix.virtual_alias_domains|join(' ') }}
 virtual_alias_maps = {{ postfix.virtual_alias_maps }}
 
-# opendkim
+# header checks
+mime_header_checks = regexp:/etc/postfix/header_checks
+header_checks = regexp:/etc/postfix/header_checks
 
+
+# opendkim
 {% if postfix.enable_opendkim %}
 
 milter_protocol = 6
@@ -134,4 +138,4 @@ milter_default_action = accept
 smtpd_milters = inet:localhost:8891
 non_smtpd_milters = inet:localhost:8891
 
-{% endif %}
+{% endif %}