modules/services/mail/dovecot2.nix: accept plain text authentication only over secure channels when TLS is available
Connects from 'localhost' are always considered secure.
This commit is contained in:
parent
1da16a5ea1
commit
155495deb2
@ -17,6 +17,7 @@ let
|
|||||||
ssl_cert_file = ${cfg.sslServerCert}
|
ssl_cert_file = ${cfg.sslServerCert}
|
||||||
ssl_key_file = ${cfg.sslServerKey}
|
ssl_key_file = ${cfg.sslServerKey}
|
||||||
ssl_ca_file = ${cfg.sslCACert}
|
ssl_ca_file = ${cfg.sslCACert}
|
||||||
|
disable_plaintext_auth = yes
|
||||||
'' else ''
|
'' else ''
|
||||||
ssl = no
|
ssl = no
|
||||||
disable_plaintext_auth = no
|
disable_plaintext_auth = no
|
||||||
|
Loading…
x
Reference in New Issue
Block a user