From a78cb829e5a679b6e6a13a266e0e2e9019712517 Mon Sep 17 00:00:00 2001
From: Antoine SCHILDKNECHT <antoine.schildknecht@ubicast.eu>
Date: Thu, 3 Mar 2022 07:05:11 +0000
Subject: [PATCH] Prefer TLS SMTP | refs #26108
---
roles/postfix/templates/main.cf.j2 | 1 +
1 file changed, 1 insertion(+)
diff --git a/roles/postfix/templates/main.cf.j2 b/roles/postfix/templates/main.cf.j2
index 8f3e2463..4427f01a 100644
--- a/roles/postfix/templates/main.cf.j2
+++ b/roles/postfix/templates/main.cf.j2
@@ -16,6 +16,7 @@ smtpd_use_tls = yes
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
+smtp_tls_security_level = may
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
--
GitLab