Disable submission with explicit STARTTLS by default

Deprecated, but not yet scheduled for removal pending user feedback.
2025-11-08 12:37:29 +01:00
parent 58659fbdfd
commit 1337e2eece
3 changed files with 15 additions and 6 deletions
--- a/default.nix
+++ b/default.nix
@@ -877,9 +877,11 @@ in

    enableSubmission = mkOption {
      type = types.bool;
-      default = true;
+      default = false;
      description = ''
        Whether to enable SMTP with STARTTLS on port 587.
+
+        The use of this port is discouraged per RFC 8314 3.3, see also Appendix A.
      '';
    };