diff --git a/rootfs/etc/confd/templates/10-ssl.conf.tmpl b/rootfs/etc/confd/templates/10-ssl.conf.tmpl
index 0bb4d42..d1eb630 100644
--- a/rootfs/etc/confd/templates/10-ssl.conf.tmpl
+++ b/rootfs/etc/confd/templates/10-ssl.conf.tmpl
@@ -1,7 +1,7 @@
 ssl = yes
-ssl_cert = </etc/ssl/mail/fullchain.pem
-ssl_key = </etc/ssl/mail/privkey.pem
-ssl_dh_parameters_length = {{getenv "SSLDHLENGTH"}}
-ssl_protocols = {{getenv "SSLPROTOCOLS"}}
-ssl_cipher_list = {{getenv "SSLCIPHERLIST"}}
+ssl_cert = </etc/ssl/mail/{{ getenv "CERTNAME" "fullchain.pem"}}
+ssl_key = </etc/ssl/mail/{{ getenv "KEYNAME" "privkey.pem"}}
+ssl_dh_parameters_length = {{getenv "SSL_DH_LENGTH" "2048"}}
+ssl_protocols = {{getenv "SSL_PROTOCOLS" "!SSLv2 !SSLv3"}}
+ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!ADH:!LOW:!SSLv2:!EXP:!aNULL:!RC4:+HIGH:+MEDIUM"}}
 ssl_prefer_server_ciphers = yes