diff options
-rw-r--r-- | ymir.nix | 14 |
1 files changed, 7 insertions, 7 deletions
@@ -499,9 +499,9 @@ in rec { | |||
499 | sslKey = "${config.security.acme.directory}/yggdrasil.li/key.pem"; | 499 | sslKey = "${config.security.acme.directory}/yggdrasil.li/key.pem"; |
500 | config = { | 500 | config = { |
501 | #the dh params | 501 | #the dh params |
502 | smtpd_tls_dh2048_param_file = config.security.dhparams.params.postfix-2048.path; | 502 | smtpd_tls_dh2048_param_file = config.security.dhparams.params."postfix-2048".path; |
503 | smtpd_tls_dh1024_param_file = config.security.dhparams.params.postfix-1024.path; | 503 | smtpd_tls_dh1024_param_file = config.security.dhparams.params."postfix-1024".path; |
504 | smtpd_tls_dh512_param_file = config.security.dhparams.params.postfix-512.path; | 504 | smtpd_tls_dh512_param_file = config.security.dhparams.params."postfix-512".path; |
505 | #enable ECDH | 505 | #enable ECDH |
506 | smtpd_tls_eecdh_grade = "strong"; | 506 | smtpd_tls_eecdh_grade = "strong"; |
507 | #enabled SSL protocols, don't allow SSLv2 and SSLv3 | 507 | #enabled SSL protocols, don't allow SSLv2 and SSLv3 |
@@ -1094,10 +1094,10 @@ in rec { | |||
1094 | enable = true; | 1094 | enable = true; |
1095 | params = { | 1095 | params = { |
1096 | nginx.bits = 3072; | 1096 | nginx.bits = 3072; |
1097 | posfix-512.bits = 512; | 1097 | "posfix-512".bits = 512; |
1098 | postfix-1024.bits = 1024; | 1098 | "postfix-1024".bits = 1024; |
1099 | postfix-2048.bits = 2048; | 1099 | "postfix-2048".bits = 2048; |
1100 | dovecot2.bits = 2048; | 1100 | "dovecot2".bits = 2048; |
1101 | prosody.bits = 3072; | 1101 | prosody.bits = 3072; |
1102 | }; | 1102 | }; |
1103 | }; | 1103 | }; |