From f2b903c3a40d7e79c95b9b8c9453053947a795bd Mon Sep 17 00:00:00 2001
From: Sebastian Hugentobler <thallian@users.noreply.github.com>
Date: Fri, 28 Oct 2016 08:51:00 +0200
Subject: [PATCH] Update 10-ssl.conf.tmpl

---
 rootfs/etc/confd/templates/10-ssl.conf.tmpl | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/rootfs/etc/confd/templates/10-ssl.conf.tmpl b/rootfs/etc/confd/templates/10-ssl.conf.tmpl
index 0bb4d42..d1eb630 100644
--- a/rootfs/etc/confd/templates/10-ssl.conf.tmpl
+++ b/rootfs/etc/confd/templates/10-ssl.conf.tmpl
@@ -1,7 +1,7 @@
 ssl = yes
-ssl_cert = </etc/ssl/mail/fullchain.pem
-ssl_key = </etc/ssl/mail/privkey.pem
-ssl_dh_parameters_length = {{getenv "SSLDHLENGTH"}}
-ssl_protocols = {{getenv "SSLPROTOCOLS"}}
-ssl_cipher_list = {{getenv "SSLCIPHERLIST"}}
+ssl_cert = </etc/ssl/mail/{{ getenv "CERTNAME" "fullchain.pem"}}
+ssl_key = </etc/ssl/mail/{{ getenv "KEYNAME" "privkey.pem"}}
+ssl_dh_parameters_length = {{getenv "SSL_DH_LENGTH" "2048"}}
+ssl_protocols = {{getenv "SSL_PROTOCOLS" "!SSLv2 !SSLv3"}}
+ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!ADH:!LOW:!SSLv2:!EXP:!aNULL:!RC4:+HIGH:+MEDIUM"}}
 ssl_prefer_server_ciphers = yes