ryan.freumh.org / eilean-nix
Self-host your own digital island
fork atom

mailserver disable TLSv1.1

Ryan Gibb d9358364 ca9c6566

options
unified split
Changed files
+4 -4
modules
mailserver
postfix.nix
+4 -4
modules/mailserver/postfix.nix 
···

       
206

       
 

       
        smtpd_tls_eecdh_grade = "ultra";


     

       
207

       
 

       



     

       
208

       
 

       
        # Disable obselete protocols


     

       
209

       
-

       
        smtpd_tls_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
210

       
-

       
        smtp_tls_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
211

       
-

       
        smtpd_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
212

       
-

       
        smtp_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
213

       
 

       



     

       
214

       
 

       
        smtp_tls_ciphers = "high";


     

       
215

       
 

       
        smtpd_tls_ciphers = "high";


     
···

       
206

       
 

       
        smtpd_tls_eecdh_grade = "ultra";


     

       
207

       
 

       



     

       
208

       
 

       
        # Disable obselete protocols


     

       
209

       
+

       
        smtpd_tls_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
210

       
+

       
        smtp_tls_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
211

       
+

       
        smtpd_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
212

       
+

       
        smtp_tls_mandatory_protocols = "TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv2, !SSLv3";


     

       
213

       
 

       



     

       
214

       
 

       
        smtp_tls_ciphers = "high";


     

       
215

       
 

       
        smtpd_tls_ciphers = "high";