9 lines
442 B
Cheetah
9 lines
442 B
Cheetah
ssl = yes
|
|
ssl_cert = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.crt
|
|
ssl_key = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.key
|
|
ssl_dh=</etc/ssl/mail/dh.pem
|
|
ssl_dh_parameters_length = {{getenv "SSL_DH_LENGTH" "2048"}}
|
|
ssl_min_protocol = {{getenv "SSL_MIN_PROTOCOL" "TLSv1"}}
|
|
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH "}}
|
|
ssl_prefer_server_ciphers = yes
|