mail.yml

@@ -14,11 +14,7 @@
     - mail
   become: true
   roles:
-    - role: dovecot
-      tags: [dovecot]
-    - role: rspamd
-      tags: [rspamd]
-    - role: postfix
-      tags: [postfix]
-    - role: mlmmj
-      tags: [mlmmj]
+    - dovecot
+    - rspamd
+    - postfix
+    - mlmmj

roles/postfix/vars/main.yml

@@ -353,14 +353,6 @@ postfix_config:
     value: 'aNULL'
     state: present
 
-  - name: smtpd_tls_mandatory_protocols
-    value: 'TLSv1.2 TLSv1.3'
-    state: present
-
-  - name: smtpd_tls_protocols
-    value: 'TLSv1.2 TLSv1.3'
-    state: present
-
   - name: smtpd_tls_received_header
     value: 'yes'
     state: present
@@ -378,8 +370,7 @@ postfix_config:
     state: present
 
   - name: tls_high_cipherlist
-    value: |-
-      'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384'
+    value: 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA'
     state: present
 
   - name: tls_ssl_options