dovecot/rootfs/etc/confd/templates/10-ssl.conf.tmpl

8 lines
523 B
Cheetah

ssl = yes
ssl_cert = </etc/ssl/mail/tls.crt
ssl_key = </etc/ssl/mail/tls.key
ssl_dh=</etc/dovecot/keys/dh.pem
ssl_min_protocol = {{getenv "SSL_MIN_PROTOCOL" "TLSv1.2"}}
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"}}
ssl_prefer_server_ciphers = yes