diff --git a/ansible/roles/opendmarc/handlers/main.yml b/ansible/roles/opendmarc/handlers/main.yml
index 4fe66b71..ce116767 100644
--- a/ansible/roles/opendmarc/handlers/main.yml
+++ b/ansible/roles/opendmarc/handlers/main.yml
@@ -1,5 +1,5 @@
 ---
-- name: Reload OpenDMARC
+- name: Restart OpenDMARC
   service:
     name: opendmarc
-    state: reloaded
+    state: restarted
diff --git a/ansible/roles/opendmarc/tasks/main.yml b/ansible/roles/opendmarc/tasks/main.yml
index f236b4d6..4743dd77 100644
--- a/ansible/roles/opendmarc/tasks/main.yml
+++ b/ansible/roles/opendmarc/tasks/main.yml
@@ -27,4 +27,4 @@
   tags:
     - role::opendmarc
   notify:
-    - Reload OpenDMARC
+    - Restart OpenDMARC
diff --git a/ansible/roles/opendmarc/templates/opendmarc.conf.j2 b/ansible/roles/opendmarc/templates/opendmarc.conf.j2
index 5bb596a7..b5bff226 100644
--- a/ansible/roles/opendmarc/templates/opendmarc.conf.j2
+++ b/ansible/roles/opendmarc/templates/opendmarc.conf.j2
@@ -17,17 +17,17 @@ IgnoreAuthenticatedClients true
 # IgnoreHosts /etc/opendmarc/ignore.hosts
 
 RejectFailures true
+HoldQuarantinedMessages true
+
 ReportCommand /usr/sbin/sendmail -t
 RequiredHeaders true
 Socket inet:8893@localhost
 SoftwareHeader true
 SPFIgnoreResults false
-TrustedAuthservIDs HOSTNAME
+TrustedAuthservIDs {{ opendmarc_authserv_id }}
 PidFile /run/opendmarc/opendmarc.pid
 
 PublicSuffixList /usr/share/publicsuffix/public_suffix_list.dat
 
-TrustedAuthservIDs HOSTNAME
-
 UMask 0002
 UserID opendmarc
diff --git a/ansible/roles/opendmarc/vars/main.yml b/ansible/roles/opendmarc/vars/main.yml
index bb3fe8d1..63dbe7ab 100644
--- a/ansible/roles/opendmarc/vars/main.yml
+++ b/ansible/roles/opendmarc/vars/main.yml
@@ -2,4 +2,4 @@
 opendmarc_failures: "dmarc+failures@int.pydis.wtf"
 opendmarc_failure_reports: "dmarc+failurereports@int.pydis.wtf"
 opendmarc_failure_reports_from: "dmarc+noreply@int.pydis.wtf"
-opendmarc_authserv_id: "PyDisDMARC"
+opendmarc_authserv_id: "mail.pydis.wtf"