Skynet/misc_nixos-mailserver
7
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

dovecot: configure preferred elliptic curves

Browse source
This commit is contained in:
Martin Weinelt 2025-06-13 03:13:27 +02:00
parent 4fd9508d41
commit efebf59b13
No known key found for this signature in database
GPG key ID: 87C1E9888F856759
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
mail-server/dovecot.nix
View file

@ -298,9 +298,12 @@ in
} }
mail_access_groups = ${vmailGroupName} mail_access_groups = ${vmailGroupName}
# https://ssl-config.mozilla.org/#server=dovecot&version=2.3.21&config=intermediate&openssl=3.4.1&guideline=5.7
ssl = required ssl = required
ssl_min_protocol = TLSv1.2 ssl_min_protocol = TLSv1.2
ssl_prefer_server_ciphers = no ssl_prefer_server_ciphers = no
ssl_curve_list = X25519:prime256v1:secp384r1
service lmtp { service lmtp {
unix_listener dovecot-lmtp { unix_listener dovecot-lmtp {