GitLab

The dependency runs the mailman role with --tags apache, wasting time.

This sidesteps a DoS possibility and does not lie to our usual
firewall check (which considers kernel log freshness).

A standard STARTTLS + LOGIN authenticated submission service is
useful in mobile situations, so support it as a side project.

Now that we don't use satellite config anymore it can make a
difference.

But accept local recipients from local (not TCP/IP) and loopback SMTP
connections only.

Replace common.exim with a specialized router.  This enables meaninful
sender and recipient verification, because all addresses aren't
routable anymore.  And doesn't put mailing list load on our redirector
service.

We'll need substitutions in the following.