Optional: Point your mail DNS to Fastmail or similar so you don't have to host anything.
This is about bullet proof.