- hosts:
    - all !knot
  roles:
    - postfix-satellite
  vars:
    username: "{{ ansible_hostname }}.trygvis.io"
    postfix:
      sasl_password:
        - host: "[trygvis.io]:587"
          username: "{{ username }}"
          password: "{{ dovecot__passwords[username] }}"

  tasks:
    - tags: postfix-satellite
      become: yes
      lineinfile:
        dest: /etc/postfix/sasl_passwd
        state: absent
        regex: "^\\[knot.trygvis.io\\]"