Most config is don with "raw" config

templates/postfix-main.cf.mustache

@@ -110,6 +110,15 @@ mail_owner = {{vars.postfix.mail_owner}}
 #
 #mydomain = domain.tld
 
+#
+# CFengine Raw
+#
+{{vars.postfix.cfg.main_raw}}
+#
+# CFengine Raw End
+#
+
+
 # SENDING MAIL
 # 
 # The myorigin parameter specifies the domain that locally-posted
@@ -190,7 +199,7 @@ mail_owner = {{vars.postfix.mail_owner}}
 #mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain,
 #	mail.$mydomain, www.$mydomain, ftp.$mydomain
 
-mydestination = {{#vars.postfix.cfg.mydestination}} {{.}} {{/vars.postfix.cfg.mydestination}}
+# mydestination = 
 
 # REJECTING MAIL FOR UNKNOWN LOCAL USERS
 #
@@ -688,7 +697,7 @@ setgid_group = {{vars.postfix.mail_group}}
 # readme_directory: The location of the Postfix README files.
 #
 #readme_directory = /usr/local/share/doc/postfix
-inet_protocols = all
+#inet_protocols = all
 
 # smtp CA path (default to system-wide location)
 smtp_tls_CApath = /etc/ssl/certs
@@ -705,5 +714,4 @@ milter_default_action = reject
 #
 non_smtpd_milters = {{#vars.postfix.cfg.non_smtpd_milters}} {{.}}{{/vars.postfix.cfg.non_smtpd_milters}}
 
-{{vars.postfix.cfg.main_raw}}