Skip to content

Instantly share code, notes, and snippets.

@brainsik

brainsik/main.cf

Created May 1, 2017 20:23
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save brainsik/abff5db89482d0191007228239a9e658 to your computer and use it in GitHub Desktop.
Save brainsik/abff5db89482d0191007228239a9e658 to your computer and use it in GitHub Desktop.
Download ZIP
Postfix - secure relaying to smarthost
Raw
main.cf
# client TLS parameters
smtp_tls_security_level = secure
smtp_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1,!TLSv1.1
smtp_tls_mandatory_ciphers = high
smtp_tls_cert_file=/etc/letsencrypt/live/XXX/fullchain.pem
smtp_tls_key_file=/etc/letsencrypt/live/XXX/privkey.pem
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_loglevel = 1
smtp_tls_note_starttls_offer = yes
# relay to smarthost
relayhost = [XXX]:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_password
smtp_sasl_tls_verified_security_options = noanonymous
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment