Dane in postfix is not hard but what many of the things out there dont say (not here) is that the tlsa record should state a host name
so port 25, using tcp, on host smtp, for domian kernel-error.de
Postfix is a little more specific than that for https requests.
I wish i knew that before i started. Anyhow the zoo has dane, which is not a danish farm animal