Move dh2048 creation to base, remove server-scripts from base

[ansible.git] / roles / postfix / templates / main.cf

diff --git a/roles/postfix/templates/main.cf b/roles/postfix/templates/main.cf
index fa2082c630f3a2260e12857255a1f252d162f285..4488ec4ee4c06fa2e1d4fbaa9567f3a2e6a294f5 100644 (file)
--- a/roles/postfix/templates/main.cf
+++ b/roles/postfix/templates/main.cf
@@ -13,7 +13,7 @@ smtpd_tls_key_file=/etc/ssl/private/letsencrypt/live.key
 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
 smtpd_tls_security_level = may
 smtpd_tls_loglevel = 1
-smtpd_tls_dh1024_param_file = {{ postfix.paths.dh2048 }}
+smtpd_tls_dh1024_param_file = /etc/ssl/dh2048.pem
 smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
 smtpd_tls_ciphers = low
 smtpd_tls_mandatory_ciphers = high