diff --git a/config/dovecot/APKBUILD b/config/dovecot/APKBUILD
index 5851816..1a870ad 100644
--- a/config/dovecot/APKBUILD
+++ b/config/dovecot/APKBUILD
@@ -3,7 +3,7 @@
 
 . ../APKBUILD-config.template
 
-pkgver=2021.07.30.01
+pkgver=2021.08.11.03
 pkgrel=0
 depends="
 	dovecot-lmtpd
diff --git a/config/haproxy/APKBUILD b/config/haproxy/APKBUILD
index 4e241e8..55fc7a4 100644
--- a/config/haproxy/APKBUILD
+++ b/config/haproxy/APKBUILD
@@ -3,7 +3,7 @@
 
 . ../APKBUILD-config.template
 
-pkgver=2021.08.05.01
+pkgver=2021.08.11.02
 pkgrel=0
 depends="redxen-secret-letsencrypt-full redxen-data-haproxy-errorpages"
 checkdepends="haproxy"
diff --git a/config/nftables/APKBUILD b/config/nftables/APKBUILD
index b9c9a61..22c51a3 100644
--- a/config/nftables/APKBUILD
+++ b/config/nftables/APKBUILD
@@ -3,7 +3,7 @@
 
 . ../APKBUILD-config.template
 
-pkgver=2021.07.04.02
+pkgver=2021.08.11.02
 pkgrel=0
 options="!check" # check requires root?
 
diff --git a/config/postfix/APKBUILD b/config/postfix/APKBUILD
index b66a262..0945e33 100644
--- a/config/postfix/APKBUILD
+++ b/config/postfix/APKBUILD
@@ -3,7 +3,7 @@
 
 . ../APKBUILD-config.template
 
-pkgver=2021.07.30.02
+pkgver=2021.08.11.02
 pkgrel=0
 depends="postfix-pgsql redxen-secret-letsencrypt-chain redxen-secret-letsencrypt-private"
 
@@ -41,7 +41,7 @@ package() {
 }
 
 sha512sums="
-b43313dc2b00848bfbc6b14bdcee2c7a024aeeae5d2a46b6aaf370d55f58ac9f9a4cf992b7d75a8acf35b75fd00d04144626169ef153614b223de87677bfda21  master.cf
+1cb4072b03f3e9d79b15a082ccad99fc005129b56fc42c467713520f89feef298082637fbfaa01a04c2a1b6e69a254d9018adccaf9d98a4532f067214a4035f4  master.cf
 219a7e2123adfaa88a1ca8d884739789de35a9433a70b1df57f0b04c551153c737a587a2f5ef4d566cd5c68dd69a94e13ae67f4404b4449a9bd30bbb0a4df912  main.cf
 e2e2073b064a921a9eeed028e17617bcd2d1235517d908b4daadef45eb4cbb8686023c532d7938a779021cdd9548afe97f59d4c3232e7e01dca229e37e8c63ff  secret
 9c3ae0c3448710cb13e27cfd67864d27d364a3893ce70033df25ecd21cb0cc28a36f7d8aa9fe0cbdd0dc3516e78f34a5645a727387870d74ed8643078ec7e062  pgsql-aliases.cf
diff --git a/config/postfix/master.cf b/config/postfix/master.cf
index 20ab237..9939159 100644
--- a/config/postfix/master.cf
+++ b/config/postfix/master.cf
@@ -2,13 +2,19 @@
 # service type  private unpriv  chroot  wakeup  maxproc command + args
 #               (yes)   (yes)   (no)    (never) (100)
 # ==========================================================================
-submission inet n       -       n       -       -       smtpd
-	-o smtpd_tls_security_level=encrypt
-	-o smtpd_tls_auth_only=yes
-smtp      unix  -       -       n       -       -       smtp
+
+# SMTP (25)
 smtp      inet  n       -       n       -       -       smtpd
+
+# SMTPS (465)
 smtps     inet  n       -       n       -       -       smtpd
 	-o smtpd_tls_wrappermode=yes
+
+# SMTP STARTTLS (587)
+submission inet n       -       n       -       -       smtpd
+	-o smtpd_tls_security_level=encrypt
+
+smtp      unix  -       -       n       -       -       smtp
 pickup    unix  n       -       y       60      1       pickup
 cleanup   unix  n       -       y       -       0       cleanup
 qmgr      unix  n       -       n       300     1       qmgr
diff --git a/data/bindzone/APKBUILD b/data/bindzone/APKBUILD
index ae2aa8c..dad4691 100644
--- a/data/bindzone/APKBUILD
+++ b/data/bindzone/APKBUILD
@@ -3,7 +3,7 @@
 
 . ../APKBUILD-data.template
 
-pkgver=2021.08.04.01
+pkgver=2021.08.11.03
 pkgrel=0
 checkdepends="bind-tools"
 makedepends="
@@ -69,6 +69,6 @@ internal() {
 }
 
 sha512sums="
-01c6e88047340dc0080eb505075f62dbc8a1642b230b571f4d852ce67f40cb860012977b802f63677cf5fbe9ddecd60a591247ecaaead9fcdfb6e15109b91bb6  redxen.eu
+e80bb3e2c0840d5b9f2050ff8db5d8a7b212c1af81f7691e88a6324fd7f9825ffcc68e8c97e89a74a6261b9e6fcc75d40672087380fd595968826622e6da3d1c  redxen.eu
 f6e43a72d91106319151c614f12d2f3a498a0378870901d9e7e2ecacf62b40060c4f314a6e6cdd1683ec56067e014182e4389f1c9387c58e381bad64349bda15  internal
 "
diff --git a/data/bindzone/redxen.eu b/data/bindzone/redxen.eu
index 3df3b69..ce491c0 100644
--- a/data/bindzone/redxen.eu
+++ b/data/bindzone/redxen.eu
@@ -2,7 +2,8 @@
 ; redxen.eu zonefile
 ;
 
-$TTL 21600
+; 10 minute TTL to allow quick changes
+$TTL 600
 
 @                                       86400   IN      SOA     12180621.nbg1-dc3.hetzner admin CURRENTSOA ( 86400
                                                                                                              7200