Skynet/misc_nixos-mailserver
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enable dovecot option to prefer server ciphers

Browse source 
This might prevent misconfigured clients to use a weak cipher when stronger ciphers are available.
This commit is contained in:
Benjamin Asbach 2020-05-24 19:23:53 +02:00
parent 9b98746515
commit fb8886547b
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
mail-server/dovecot.nix
View file

@ -130,6 +130,7 @@ in
mail_access_groups = ${vmailGroupName} mail_access_groups = ${vmailGroupName}
ssl = required ssl = required
ssl_min_protocol = TLSv1.2 ssl_min_protocol = TLSv1.2
ssl_prefer_server_ciphers = yes
service lmtp { service lmtp {
unix_listener dovecot-lmtp { unix_listener dovecot-lmtp {