OpenRailwayMap / server-admin

Issue tracker for admin stuff related to openrailwaymap.org instance.
4 stars 2 forks source link

enable TLS for SMTP #4

Closed DerDakon closed 2 years ago

DerDakon commented 7 years ago

Currently neither for incoming nor for outgoing SMTP connections encryption is used.

DerDakon commented 5 years ago

Should work now.

rurseekatze commented 5 years ago

Can you document your changes and commit the config file?

DerDakon commented 5 years ago

I think this is beyond the scope of the OpenRailwayMap repo. What I did was to ask the Mozilla SSL config generator for the Postfix version installed, append that to /etc/postfix/main.cf, and fix the path to the certificates to point at the webserver ones.

DerDakon commented 2 years ago

The necessary bits are in ansible/roles/mail/templates/main.cf since 4c492f14c6d57507ecd8254468e7a77af2638516 (smtpdtls*).