dovecot: disable Diffie-Hellman support

Recommended in the modern recommendation by Mozilla. Support for elliptic
curves is widespread and they are much faster.
This commit is contained in:
Martin Weinelt 2025-06-13 03:20:14 +02:00
parent efebf59b13
commit 21ce4b4ff8
No known key found for this signature in database
GPG key ID: 87C1E9888F856759

View file

@ -182,6 +182,7 @@ in
mailLocation = dovecotMaildir;
sslServerCert = certificatePath;
sslServerKey = keyPath;
enableDHE = lib.mkDefault false;
enableLmtp = true;
mailPlugins.globally.enable = lib.optionals cfg.fullTextSearch.enable [
"fts"