docker
docker copied to clipboard
Enhance Postfix TLS Configuration (with ECC Support) and Domain Exceptions
- Implemented more specific TLS configuration for Postfix, allowing flexible security levels based on environment variables.
- Added support for ECC certificates and keys.
- Introduced domain exceptions via the POSTFIX_SMTP_TLS_EXCEPTIONS variable to set smtp_tls_security_level to "may" for specified domains.
Note: It is advisable to update the following line:
smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1
to
smtpd_tls_protocols = >=TLSv1.2
This change will ensure that your server supports TLS connections starting from version 1.2 and above, enhancing security. For more details, please refer to the Postfix Documentation. Please note that this change has not been made in this pull request.