2016-07-06 08:58:48 +00:00
|
|
|
ssl = yes
|
2017-09-22 11:14:50 +00:00
|
|
|
ssl_cert = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.crt
|
|
|
|
|
ssl_key = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.key
|
2018-02-16 08:33:18 +00:00
|
|
|
ssl_dh=</etc/ssl/mail/dh.pem
|
|
|
|
|
ssl_min_protocol = {{getenv "SSL_MIN_PROTOCOL" "TLSv1"}}
|
|
|
|
|
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH "}}
|
2016-07-06 08:58:48 +00:00
|
|
|
ssl_prefer_server_ciphers = yes
|
