commit d9358364442a4532ef4865ebef45ce6448906a6b · ryan.freumh.org/eilean-nix

+4 -4
modules/mailserver/postfix.nix
···

       206
       206
        
               smtpd_tls_eecdh_grade = "ultra";

     

       207
       207
        
       

     

       208
       208
        
               # Disable obselete protocols

     

       209
       209
       -
               smtpd_tls_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       210
       210
       -
               smtp_tls_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       211
       211
       -
               smtpd_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       212
       212
       -
               smtp_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       209
       209
       +
               smtpd_tls_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       210
       210
       +
               smtp_tls_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       211
       211
       +
               smtpd_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       212
       212
       +
               smtp_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";

     

       213
       213
        
       

     

       214
       214
        
               smtp_tls_ciphers = "high";

     

       215
       215
        
               smtpd_tls_ciphers = "high";