majic-ansible-roles Files · roles/mail

Files @ 8d272d91d3d2

Branch filter:

Location: majic-ansible-roles/roles/mail_server/defaults/main.yml - annotation

8d272d91d3d2 518 B text/x-yaml Show Source Show as Raw Download as Raw

branko

MAR-165: Deploy Diffie-Helman parameters for LDAP server in the ldap_server role:

- Not relevant for Debian Strech because of a bug in the OpenLDAP
version it ships with.
- This should allow use of DHE ciphers with LDAP server.
- Generated DH parameters only help pick one of the parameters from
RFC-7919 (based on the size of generated ones).
- Make the cipher test lists distro-specific due to differences
between supported algorithms in respective GnuTLS versions.

e838bcb94a9e
e838bcb94a9e
b0c92677ba93
e838bcb94a9e
e838bcb94a9e
e838bcb94a9e
ddfeb485fb84
3bd270c9e860
111e954e826d
f344ed6181a9
f344ed6181a9
f344ed6181a9
c2f446ec7e2a
c2f446ec7e2a
c2f446ec7e2a
c2f446ec7e2a
c2f446ec7e2a
c2f446ec7e2a
c2f446ec7e2a
c2f446ec7e2a
35fff2909917

---

enable_backup: false
mail_user: vmail
imap_folder_separator: "/"
smtp_rbl: []
mail_postmaster: "postmaster@{{ ansible_domain }}"
smtp_allow_relay_from: []
local_mail_aliases: {}
imap_max_user_connections_per_ip: 10
mail_server_tls_protocols:
  - "TLSv1.2"
mail_server_tls_ciphers: "\
DHE-RSA-AES128-GCM-SHA256:\
DHE-RSA-AES256-GCM-SHA384:\
DHE-RSA-CHACHA20-POLY1305:\
ECDHE-RSA-AES128-GCM-SHA256:\
ECDHE-RSA-AES256-GCM-SHA384:\
ECDHE-RSA-CHACHA20-POLY1305:\
!aNULL:!MD5:!EXPORT"
mail_message_size_limit: 10240000