In accordance with https://ssl-config.mozilla.org/#server=postfix.
Since https://github.com/NixOS/nixpkgs/pull/124391, enabling kreasd also sets `networking.resolvconf.useLocalResolver = true`.