dovecot: disable Diffie-Hellman support

Recommended in the modern recommendation by Mozilla. Support for elliptic curves is widespread and they are much faster.
2025-06-13 03:20:14 +02:00
parent efebf59b13
commit 21ce4b4ff8
1 changed files with 1 additions and 0 deletions
--- a/mail-server/dovecot.nix
+++ b/mail-server/dovecot.nix
@@ -182,6 +182,7 @@ in
      mailLocation = dovecotMaildir;
      sslServerCert = certificatePath;
      sslServerKey = keyPath;
+      enableDHE = lib.mkDefault false;
      enableLmtp = true;
      mailPlugins.globally.enable = lib.optionals cfg.fullTextSearch.enable [
        "fts"