X-Git-Url: https://git.ralfj.de/ansible.git/blobdiff_plain/413a688e37e2ca6fb569ec67f9b56b0b77f60d07..93e78be7a2101609149534138cbd4c627a80c393:/roles/email/templates/main.cf diff --git a/roles/email/templates/main.cf b/roles/email/templates/main.cf index b674e42..eb6bdf1 100644 --- a/roles/email/templates/main.cf +++ b/roles/email/templates/main.cf @@ -7,6 +7,7 @@ local_recipient_maps = $alias_maps mynetworks = {{ postfix.mynetworks }} {% endif %} +{% if 'letsencrypt' in group_names %} # TLS server parameters smtpd_tls_cert_file=/etc/ssl/mycerts/letsencrypt/live.crt+chain smtpd_tls_key_file=/etc/ssl/private/letsencrypt/live.key @@ -17,6 +18,7 @@ smtpd_tls_dh1024_param_file = /etc/ssl/dh2048.pem smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3 smtpd_tls_ciphers = low smtpd_tls_mandatory_ciphers = high +{% endif %} # TLS client parameters smtp_tls_mandatory_protocols = !SSLv2 !SSLv3 smtp_tls_ciphers = low