Update 10-ssl.conf.tmpl

This commit is contained in:
Sebastian Hugentobler 2016-10-28 08:51:00 +02:00 committed by GitHub
parent bbc8322376
commit f2b903c3a4

View File

@ -1,7 +1,7 @@
ssl = yes
ssl_cert = </etc/ssl/mail/fullchain.pem
ssl_key = </etc/ssl/mail/privkey.pem
ssl_dh_parameters_length = {{getenv "SSLDHLENGTH"}}
ssl_protocols = {{getenv "SSLPROTOCOLS"}}
ssl_cipher_list = {{getenv "SSLCIPHERLIST"}}
ssl_cert = </etc/ssl/mail/{{ getenv "CERTNAME" "fullchain.pem"}}
ssl_key = </etc/ssl/mail/{{ getenv "KEYNAME" "privkey.pem"}}
ssl_dh_parameters_length = {{getenv "SSL_DH_LENGTH" "2048"}}
ssl_protocols = {{getenv "SSL_PROTOCOLS" "!SSLv2 !SSLv3"}}
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!ADH:!LOW:!SSLv2:!EXP:!aNULL:!RC4:+HIGH:+MEDIUM"}}
ssl_prefer_server_ciphers = yes