dovecot: configure preferred elliptic curves

2025-06-13 03:13:27 +02:00
parent 4fd9508d41
commit efebf59b13
1 changed files with 3 additions and 0 deletions
--- a/mail-server/dovecot.nix
+++ b/mail-server/dovecot.nix
@@ -298,9 +298,12 @@ in
        }

        mail_access_groups = ${vmailGroupName}
+
+        # https://ssl-config.mozilla.org/#server=dovecot&version=2.3.21&config=intermediate&openssl=3.4.1&guideline=5.7
        ssl = required
        ssl_min_protocol = TLSv1.2
        ssl_prefer_server_ciphers = no
+        ssl_curve_list = X25519:prime256v1:secp384r1

        service lmtp {
          unix_listener dovecot-lmtp {