From 764875dd5939a820405f35e8d500555bda304a70 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Fri, 1 Feb 2019 22:12:22 +0100
Subject: ...

---
 ymir.nix | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/ymir.nix b/ymir.nix
index 514bf946..c0b52d3c 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -499,9 +499,9 @@ in rec {
     sslKey = "${config.security.acme.directory}/yggdrasil.li/key.pem";
     config = {
       #the dh params
-      smtpd_tls_dh2048_param_file = config.security.dhparams.params.postfix-2048.path;
-      smtpd_tls_dh1024_param_file = config.security.dhparams.params.postfix-1024.path;
-      smtpd_tls_dh512_param_file = config.security.dhparams.params.postfix-512.path;
+      smtpd_tls_dh2048_param_file = config.security.dhparams.params."postfix-2048".path;
+      smtpd_tls_dh1024_param_file = config.security.dhparams.params."postfix-1024".path;
+      smtpd_tls_dh512_param_file = config.security.dhparams.params."postfix-512".path;
       #enable ECDH
       smtpd_tls_eecdh_grade = "strong";
       #enabled SSL protocols, don't allow SSLv2 and SSLv3
@@ -1094,10 +1094,10 @@ in rec {
     enable = true;
     params = {
       nginx.bits = 3072;
-      posfix-512.bits = 512;
-      postfix-1024.bits = 1024;
-      postfix-2048.bits = 2048;
-      dovecot2.bits = 2048;
+      "posfix-512".bits = 512;
+      "postfix-1024".bits = 1024;
+      "postfix-2048".bits = 2048;
+      "dovecot2".bits = 2048;
       prosody.bits = 3072;
     };
   };
-- 
cgit v1.2.3