From 291156ae4a7ef65fae14e7f5ea1fd465e9d3d018 Mon Sep 17 00:00:00 2001
From: arf20 <aruizfernandez05@gmail.com>
Date: Fri, 23 Feb 2024 18:05:25 +0000
Subject: Actually use opendkim milter in postfix

---
 postfix/main.cf | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'postfix')

diff --git a/postfix/main.cf b/postfix/main.cf
index 7b71024..d73d523 100644
--- a/postfix/main.cf
+++ b/postfix/main.cf
@@ -19,7 +19,12 @@ smtpd_tls_cert_file=/etc/letsencrypt/live/mail.arf20.com/fullchain.pem
 smtpd_tls_key_file=/etc/letsencrypt/live/mail.arf20.com/privkey.pem
 smtpd_use_tls=yes
 smtpd_tls_security_level=may
-smtpd_tls_protocols = !SSLv2, !SSLv3
+smtpd_tls_mandatory_ciphers = high
+smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
+smtpd_tls_mandatory_protocols = >=TLSv1.2
+smtpd_tls_protocols = >=TLSv1.2
+smtpd_tls_ciphers = high
+smtpd_tls_exclude_ciphers = aNULL, MD5
 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
 smtpd_relay_before_recipient_restrictions=no
 #   restriction options
@@ -37,6 +42,11 @@ insiders_only = check_sender_access hash:/etc/postfix/insiders, reject
 smtpd_sasl_auth_enable=yes
 smtpd_sasl_type=dovecot
 smtpd_sasl_path=private/auth
+#   milter options
+#   chrooted to /var/spool/postfix/
+smtpd_milters=unix:/opendkim/opendkim.sock
+non_smtpd_milters = $smtpd_milters
+milter_default_action = accept
 
 # common smtp (outgoing) options
 #   tls options
-- 
cgit v1.2.3