Enable dovecot option to prefer server ciphers

This might prevent misconfigured clients to use a weak cipher when stronger ciphers are available.
2020-05-24 19:23:53 +02:00 · 2020-05-24 19:23:53 +02:00 · fb8886547b
parent 9b98746515
commit fb8886547b
1 changed files with 1 additions and 0 deletions
--- a/mail-server/dovecot.nix
+++ b/mail-server/dovecot.nix
@ -130,6 +130,7 @@ in
        mail_access_groups = ${vmailGroupName}
        ssl = required
        ssl_min_protocol = TLSv1.2
+        ssl_prefer_server_ciphers = yes

        service lmtp {
          unix_listener dovecot-lmtp {