Files @ 004a2ec1b5a9
Branch filter:

Location: majic-ansible-roles/roles/xmpp_server/defaults/main.yml - annotation

branko
MAR-230: Add support for TLSv1.3 to the mail_server role:

- Tests/support for older versions have already been dropped
previously.
- Document the specifics of TLSv1.3 cipher configuration.
- Update tests. The DH param test is now applicable only for the
mandatory parameter test servers.
---

enable_backup: false
xmpp_server_archive_expiration: "never"
xmpp_server_tls_protocol: "tlsv1_2+"
xmpp_server_tls_ciphers: "\
DHE-RSA-AES128-GCM-SHA256:\
DHE-RSA-AES256-GCM-SHA384:\
DHE-RSA-CHACHA20-POLY1305:\
ECDHE-RSA-AES128-GCM-SHA256:\
ECDHE-RSA-AES256-GCM-SHA384:\
ECDHE-RSA-CHACHA20-POLY1305:\
!aNULL:!MD5:!EXPORT"