Ideally, the box should only have access to a few internet sites, all the rest being blocked and logged.
For instance, access to Debian repositories, ClamAV updates, rspamd repositories, etc.

• A whitelist / blacklist proxy, like tinyproxy might be enough.
• Adding appropriate firewall rules to automatically redirect the traffic to the proxy might be interestin

Feature: Well written, clear and formatted documentation.

Recommended approaches
Currently, Most of the configuration files and yml files have well put variable names and functionality. Unfortunately, explaining each choice and option has not been done well enough and what has been written, is written by a mathematics researcher with her very little experience in writing nicely formatted d

Make the scripts and Ansible playbooks use the changes here: hardware/mailserver@70d503f

Basically, create http_network docker network, and a modified docker-compose.yml file that uses traeffik.