diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2017-07-26 15:33:00 +0200 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2017-07-26 15:33:00 +0200 |
commit | d7f074482921e5ceba0e4a7ee79dd4b024a7f8ce (patch) | |
tree | 69ca5326d1b11df0b98f33733a986deaef8e3b51 | |
parent | 7e0a2e6840b1b14200033856b2ec29cd63563825 (diff) | |
download | nixos-d7f074482921e5ceba0e4a7ee79dd4b024a7f8ce.tar nixos-d7f074482921e5ceba0e4a7ee79dd4b024a7f8ce.tar.gz nixos-d7f074482921e5ceba0e4a7ee79dd4b024a7f8ce.tar.bz2 nixos-d7f074482921e5ceba0e4a7ee79dd4b024a7f8ce.tar.xz nixos-d7f074482921e5ceba0e4a7ee79dd4b024a7f8ce.zip |
no paths
-rw-r--r-- | ymir.nix | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -445,8 +445,8 @@ in rec { | |||
445 | sslKey = "/var/lib/acme/yggdrasil.li/key.pem"; | 445 | sslKey = "/var/lib/acme/yggdrasil.li/key.pem"; |
446 | config = { | 446 | config = { |
447 | #the dh params | 447 | #the dh params |
448 | smtpd_tls_dh1024_param_file = /etc/ssl/dhparam.pem; | 448 | smtpd_tls_dh1024_param_file = "/etc/ssl/dhparam.pem"; |
449 | smtpd_tls_dh512_param_file = /etc/ssl/dhparam.pem; | 449 | smtpd_tls_dh512_param_file = "/etc/ssl/dhparam.pem"; |
450 | #enable ECDH | 450 | #enable ECDH |
451 | smtpd_tls_eecdh_grade = "strong"; | 451 | smtpd_tls_eecdh_grade = "strong"; |
452 | #enabled SSL protocols, don't allow SSLv2 and SSLv3 | 452 | #enabled SSL protocols, don't allow SSLv2 and SSLv3 |
@@ -488,7 +488,7 @@ in rec { | |||
488 | #mailbox_command = ${pkgs.dovecot}/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" | 488 | #mailbox_command = ${pkgs.dovecot}/libexec/dovecot/dovecot-lda -f "$SENDER" -a "$RECIPIENT" |
489 | 489 | ||
490 | smtpd_sasl_type = "dovecot"; | 490 | smtpd_sasl_type = "dovecot"; |
491 | smtpd_sasl_path = private/dovecot-auth; | 491 | smtpd_sasl_path = "private/dovecot-auth"; |
492 | 492 | ||
493 | smtpd_sasl_auth_enable = true; | 493 | smtpd_sasl_auth_enable = true; |
494 | smtpd_sasl_security_options = ["noanonymous" "noplaintext"]; | 494 | smtpd_sasl_security_options = ["noanonymous" "noplaintext"]; |