summaryrefslogtreecommitdiff
path: root/ymir.nix
diff options
context:
space:
mode:
Diffstat (limited to 'ymir.nix')
-rw-r--r--ymir.nix14
1 files changed, 7 insertions, 7 deletions
diff --git a/ymir.nix b/ymir.nix
index 514bf946..c0b52d3c 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -499,9 +499,9 @@ in rec {
499 sslKey = "${config.security.acme.directory}/yggdrasil.li/key.pem"; 499 sslKey = "${config.security.acme.directory}/yggdrasil.li/key.pem";
500 config = { 500 config = {
501 #the dh params 501 #the dh params
502 smtpd_tls_dh2048_param_file = config.security.dhparams.params.postfix-2048.path; 502 smtpd_tls_dh2048_param_file = config.security.dhparams.params."postfix-2048".path;
503 smtpd_tls_dh1024_param_file = config.security.dhparams.params.postfix-1024.path; 503 smtpd_tls_dh1024_param_file = config.security.dhparams.params."postfix-1024".path;
504 smtpd_tls_dh512_param_file = config.security.dhparams.params.postfix-512.path; 504 smtpd_tls_dh512_param_file = config.security.dhparams.params."postfix-512".path;
505 #enable ECDH 505 #enable ECDH
506 smtpd_tls_eecdh_grade = "strong"; 506 smtpd_tls_eecdh_grade = "strong";
507 #enabled SSL protocols, don't allow SSLv2 and SSLv3 507 #enabled SSL protocols, don't allow SSLv2 and SSLv3
@@ -1094,10 +1094,10 @@ in rec {
1094 enable = true; 1094 enable = true;
1095 params = { 1095 params = {
1096 nginx.bits = 3072; 1096 nginx.bits = 3072;
1097 posfix-512.bits = 512; 1097 "posfix-512".bits = 512;
1098 postfix-1024.bits = 1024; 1098 "postfix-1024".bits = 1024;
1099 postfix-2048.bits = 2048; 1099 "postfix-2048".bits = 2048;
1100 dovecot2.bits = 2048; 1100 "dovecot2".bits = 2048;
1101 prosody.bits = 3072; 1101 prosody.bits = 3072;
1102 }; 1102 };
1103 }; 1103 };