nixos/hosts/mail/channel at 18a8fde66e0bc92f00bcc47f2328ab41a4843df6 - nixos - Cloonar Gitea server

Cloonar/nixos

Files

Dominik Polakovics 28a7bed3b9 feat(mail): update to 25.11 with TLS hardening

- Upgrade NixOS channel from 25.05 to 25.11
- Fix dovecot systemd service rename (dovecot2 -> dovecot)
- Convert postfix numeric settings to integers (25.11 requirement)
- Remove insecure 512-bit DH params, fix 2048-bit DH params
- Update postfix ciphers to modern ECDHE/DHE+AESGCM/CHACHA20
- Require TLS 1.2 minimum for OpenLDAP
- Remove weak ciphers (3DES, RC4, aNULL) from OpenLDAP

2025-12-01 22:24:57 +01:00

2 lines

39 B

Plaintext

Raw Blame History

https://channels.nixos.org/nixos-25.11