Mine

smtpd_banner = $myhostname ESMTP $mail_name
myhostname = srv2.domain1.com.br
mydomain = domain1.com.br
alias_maps = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = $myhostname $myorigin localhost
mynetworks = 127.0.0.1 10.1.0.0/24 200.200.20.192/28 200.255.40.20/29
relay_domains = 
home_mailbox = Maildir/
message_size_limit = 10240000
mailbox_size_limit = 51200000
inet_interfaces = all

#smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
mime_header_checks = regexp:/etc/postfix/mime_header_checks.local

#---------------------
# SSL
#---------------------
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

#-------------------------
# SASL 2 - AUTH PAM CHROOT
#-------------------------

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =

broken_sasl_auth_clients = yes

smtpd_recipient_restrictions = 
        check_sender_access hash:/etc/postfix/access,
        permit_mynetworks, 
        permit_sasl_authenticated, 
        reject_unauth_destination

smtpd_restriction_classes = local_only
local_only = check_recipient_access hash:/etc/postfix/local_domains, reject