dovecot/rootfs/etc/confd/templates/10-ssl.conf.tmpl

9 lines
442 B
Cheetah

ssl = yes
ssl_cert = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.crt
ssl_key = </etc/ssl/mail/{{ getenv "CERT_DOMAIN"}}.key
ssl_dh=</etc/ssl/mail/dh.pem
ssl_dh_parameters_length = {{getenv "SSL_DH_LENGTH" "2048"}}
ssl_min_protocol = {{getenv "SSL_MIN_PROTOCOL" "TLSv1"}}
ssl_cipher_list = {{getenv "SSL_CIPHERLIST" "ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH "}}
ssl_prefer_server_ciphers = yes