2016-07-06 08:58:48 +00:00
|
|
|
ssl = yes
|
2017-09-22 11:14:50 +00:00
|
|
|
ssl_cert = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.crt
|
|
|
|
|
ssl_key = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.key
|
2018-02-16 08:33:18 +00:00
|
|
|
ssl_dh=</etc/ssl/mail/dh.pem
|
2019-02-18 12:30:33 +00:00
|
|
|
ssl_min_protocol = {{getenv "SSL_MIN_PROTOCOL" "TLSv1.2"}}
|
|
|
|
|
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"}}
|
2016-07-06 08:58:48 +00:00
|
|
|
ssl_prefer_server_ciphers = yes
|
