Skip to content

Instantly share code, notes, and snippets.

@ryanrankin

ryanrankin/Postfix main.cf TLS for outgoing mail

Created June 29, 2017 17:30
Show Gist options
  • Save ryanrankin/fb16711637c115556a400824ee0e21a8 to your computer and use it in GitHub Desktop.
Save ryanrankin/fb16711637c115556a400824ee0e21a8 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Postfix main.cf TLS for outgoing mail
# According to http://www.postfix.org/TLS_README.html
# http://www.postfix.org/TLS_README.html#server_logging
smtpd_tls_loglevel = 1
# Enable opportunistic encryption
smtp_tls_security_level = may
# Disable insecure protocols
smtpd_tls_protocols = !SSLv2, !SSLv3
smtp_tls_protocols = !SSLv2, !SSLv3
# Only strong ciphers
smtpd_tls_ciphers = high
smtp_tls_ciphers = high
# keys
smtp_tls_cert_file = /etc/letsencrypt/live/[DOMAIN]/fullchain.pem
smtp_tls_key_file = /etc/letsencrypt/live/[DOMAIN]/privkey.pem
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment