Skynet/misc_nixos-mailserver
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

comments on extra lines

Browse source
This commit is contained in:
Robin Raymond 2017-09-20 09:26:42 +02:00
parent 50350349b1
commit 875db33579
1 changed files with 12 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
mail-server/postfix.nix
View file

@ -84,11 +84,16 @@ in
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
# TLS settings, inspired by https://github.com/jeaye/nix-files
smtpd_tls_security_level = may # Submission by mail clients is handled in submissionOptions
smtpd_tls_eecdh_grade = ultra # strong might suffice and is computationally less expensive
smtpd_tls_protocols = !SSLv2, !SSLv3 # Disable predecessors to TLS
smtpd_tls_auth_only = yes # Allowing AUTH on a non encrypted connection poses a security risk
smtpd_tls_loglevel = 1 # Log only a summary message on TLS handshake completion
# Submission by mail clients is handled in submissionOptions
smtpd_tls_security_level = may
# strong might suffice and is computationally less expensive
smtpd_tls_eecdh_grade = ultra
# Disable predecessors to TLS
smtpd_tls_protocols = !SSLv2, !SSLv3
# Allowing AUTH on a non encrypted connection poses a security risk
smtpd_tls_auth_only = yes
# Log only a summary message on TLS handshake completion
smtpd_tls_loglevel = 1
# Disable weak ciphers as reported by https://ssl-tools.net
# https://serverfault.com/questions/744168/how-to-disable-rc4-on-postfix