My advice is to give up. The era of a small organisation running their own email server has passed.
I have been running a mail server since 1994, and I am about to give up. Even being careful, there is a percentage of my mail that doesn't make it to the intended recipient. I have reverse DNS setup correctly, am whitelisted by my cloud provider, and ensure that my mail configuration is correct.
I have wasted more hours than I care to admit keeping everything running, but I face at least one major email related issue per year, compared to when I started with something every couple of years, and then usually a silly configuration issue.
I have better things to do with my time now. Let one of the big boys handle the hassles. You can still have your own domain and even some aliases.