foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

dovecot: Update TLS configurations

Browse source
This commit is contained in:
Timo Makinen 2024-12-15 21:36:12 +00:00
parent 7089f38999
commit 31473548e1
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
roles/dovecot/templates/local.conf.j2
View file

@ -1,5 +1,5 @@
# generated 2024-02-14, Mozilla Guideline v5.7, Dovecot 2.3.16, OpenSSL 1.1.1, modern configuration # generated 2024-12-15, Mozilla Guideline v5.7, Dovecot 2.3.16, OpenSSL 3.2.2, modern config
# https://ssl-config.mozilla.org/#server=dovecot&version=2.3.16&config=modern&openssl=1.1.1&guideline=5.7 # https://ssl-config.mozilla.org/#server=dovecot&version=2.3.16&config=modern&openssl=3.2.2&guideline=5.7
ssl = required ssl = required
ssl_cert = <{{ tls_certs }}/{{ mail_server }}-fullchain.crt ssl_cert = <{{ tls_certs }}/{{ mail_server }}-fullchain.crt
@ -7,6 +7,7 @@ ssl_key = <{{ tls_private }}/{{ mail_server }}.key
ssl_min_protocol = TLSv1.3 ssl_min_protocol = TLSv1.3
ssl_prefer_server_ciphers = no ssl_prefer_server_ciphers = no
ssl_curve_list = X25519:prime256v1:secp384r1
# kerberos # kerberos
auth_gssapi_hostname = "$ALL" auth_gssapi_hostname = "$ALL"