rework postfix tls

This commit is contained in:
Rouven Seifert 2024-09-26 17:49:36 +02:00
parent 7c5324dac8
commit 77c1054cb5

View file

@ -1,4 +1,4 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
let
domain = config.networking.domain;
@ -39,8 +39,9 @@ in
# home_mailbox = "Maildir/";
smtp_helo_name = config.networking.fqdn;
smtpd_banner = "${config.networking.fqdn} ESMTP $mail_name";
smtp_use_tls = true;
smtpd_use_tls = true;
smtp_tls_security_level = "may";
smtpd_tls_security_level = lib.mkForce "encrypt";
smtpd_tls_auth_only = true;
smtpd_tls_protocols = [
"!SSLv2"
"!SSLv3"