2016-07-06 08:58:48 +00:00
|
|
|
ssl = yes
|
2016-10-28 06:51:00 +00:00
|
|
|
ssl_cert = </etc/ssl/mail/{{ getenv "CERTNAME" "fullchain.pem"}}
|
|
|
|
|
ssl_key = </etc/ssl/mail/{{ getenv "KEYNAME" "privkey.pem"}}
|
|
|
|
|
ssl_dh_parameters_length = {{getenv "SSL_DH_LENGTH" "2048"}}
|
|
|
|
|
ssl_protocols = {{getenv "SSL_PROTOCOLS" "!SSLv2 !SSLv3"}}
|
|
|
|
|
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!ADH:!LOW:!SSLv2:!EXP:!aNULL:!RC4:+HIGH:+MEDIUM"}}
|
2016-07-06 08:58:48 +00:00
|
|
|
ssl_prefer_server_ciphers = yes
|
