diff --git a/galaxy.yml b/galaxy.yml index dc91448..1ce4073 100644 --- a/galaxy.yml +++ b/galaxy.yml @@ -8,7 +8,7 @@ namespace: s3lph name: mailserver # The version of the collection. Must be compatible with semantic versioning -version: '0.3.9' +version: '0.3.10' # The path to the Markdown (.md) readme file. This path is relative to the root of the collection readme: README.md diff --git a/roles/dovecot/defaults/main/tls.yml b/roles/dovecot/defaults/main/tls.yml index 63f6051..9c2bd92 100644 --- a/roles/dovecot/defaults/main/tls.yml +++ b/roles/dovecot/defaults/main/tls.yml @@ -4,7 +4,7 @@ dovecot_tls_cert_filename: /etc/ssl/certs/ssl-cert-snakeoil.pem dovecot_tls_key_filename: /etc/ssl/private/ssl-cert-snakeoil.key dovecot_tls_dh_filename: /usr/share/dovecot/dh.pem -# generated 2020-12-05, Mozilla Guideline v5.6, Dovecot 2.3.4, OpenSSL 1.1.1d, intermediate configuration -# https://ssl-config.mozilla.org/#server=dovecot&version=2.3.4&config=intermediate&openssl=1.1.1d&guideline=5.6 +# generated 2023-07-12, Mozilla Guideline v5.7, Dovecot 2.3.19, OpenSSL 3.0.9, intermediate configuration +# https://ssl-config.mozilla.org/#server=dovecot&version=2.3.19&config=intermediate&openssl=3.0.9&guideline=5.7 dovecot_tls_min_version: TLSv1.2 -dovecot_tls_cipher_list: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" # noqa yaml[line-length] +dovecot_tls_cipher_list: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305" # noqa yaml[line-length]