diff options
| author | Benjamin Asbach <4610679-asbachb@users.noreply.gitlab.com> | 2020-05-24 19:23:53 +0200 |
|---|---|---|
| committer | Benjamin Asbach <4610679-asbachb@users.noreply.gitlab.com> | 2020-05-27 10:10:59 +0200 |
| commit | fb8886547b569be3e6b72b526cea64c02424a5c4 (patch) | |
| tree | 46ca0dade273afa3c7b3791e527b5a65e0ad027d | |
| parent | 9b987465157c5d7aa00104bf9a5d20c4fe3edc82 (diff) | |
Enable dovecot option to prefer server ciphers
This might prevent misconfigured clients to use a weak cipher when stronger ciphers are available.
| -rw-r--r-- | mail-server/dovecot.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/mail-server/dovecot.nix b/mail-server/dovecot.nix index 9145af1..02d5a5d 100644 --- a/mail-server/dovecot.nix +++ b/mail-server/dovecot.nix @@ -130,6 +130,7 @@ in mail_access_groups = ${vmailGroupName} ssl = required ssl_min_protocol = TLSv1.2 + ssl_prefer_server_ciphers = yes service lmtp { unix_listener dovecot-lmtp { |