From a66a8e0431d74b1182630f3b76c95441c0225b6e Mon Sep 17 00:00:00 2001
From: Sebastian Hugentobler <sebastian@vanwa.ch>
Date: Sun, 22 Aug 2021 23:44:43 +0200
Subject: [PATCH] remove dh param generation

---
 rootfs/etc/confd/templates/10-ssl.conf.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rootfs/etc/confd/templates/10-ssl.conf.tmpl b/rootfs/etc/confd/templates/10-ssl.conf.tmpl
index 9f2017f..7efed24 100644
--- a/rootfs/etc/confd/templates/10-ssl.conf.tmpl
+++ b/rootfs/etc/confd/templates/10-ssl.conf.tmpl
@@ -1,7 +1,7 @@
 ssl = yes
 ssl_cert = </etc/ssl/mail/tls.crt
 ssl_key = </etc/ssl/mail/tls.key
-ssl_dh=</etc/ssl/mail/dh.pem
+ssl_dh=</etc/dovecot/keys/dh.pem
 ssl_min_protocol = {{getenv "SSL_MIN_PROTOCOL" "TLSv1.2"}}
 ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"}}
 ssl_prefer_server_ciphers = yes