adrien/ansible-role-postfix
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Update certificate path for lego
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Adrien Reslinger 2021-01-04 01:32:01 +01:00
parent 2aaaf30ea8
commit 5e69465772
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
3 changed files with 68 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

12
templates/etc/postfix/main.cf.j2
View file

@ -808,9 +808,9 @@ tls_high_cipherlist=EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EE
#tls_high_cipherlist=EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:!SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
smtpd_tls_security_level = may
smtpd_tls_key_file = /etc/letsencrypt/live/{{ postfix_myhostname }}/privkey.pem
smtpd_tls_cert_file = /etc/letsencrypt/live/{{ postfix_myhostname }}/cert.pem
smtpd_tls_CAfile = /etc/letsencrypt/live/{{ postfix_myhostname }}/chain.pem
smtpd_tls_key_file = /etc/lego/certificates/{{ postfix_myhostname }}.key
smtpd_tls_cert_file = /etc/lego/certificates/{{ postfix_myhostname }}.crt
smtpd_tls_CAfile = /etc/lego/certificates/{{ postfix_myhostname }}.issuer.crt
smtpd_tls_loglevel = 1
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_cache
@ -824,9 +824,9 @@ smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
#smtpd_tls_eecdh_grade=ultra
smtp_tls_security_level = may
smtp_tls_key_file = /etc/letsencrypt/live/{{ postfix_myhostname }}/privkey.pem
smtp_tls_cert_file = /etc/letsencrypt/live/{{ postfix_myhostname }}/cert.pem
smtp_tls_CAfile = /etc/letsencrypt/live/{{ postfix_myhostname }}/chain.pem
smtp_tls_key_file = /etc/lego/certificates/{{ postfix_myhostname }}.key
smtp_tls_cert_file = /etc/lego/certificates/{{ postfix_myhostname }}.crt
smtp_tls_CAfile = /etc/lego/certificates/{{ postfix_myhostname }}.issuer.crt
smtp_tls_loglevel = 1
smtp_tls_session_cache_timeout = 3600s
smtp_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_cache