dovecot: switch to TLS 1.2+ and external DH params

1 year ago · 51bc48623b
parent 7a969a0be2
commit 51bc48623b
1 changed files with 2 additions and 1 deletions
--- a/dovecot/tasks/main.yml
+++ b/dovecot/tasks/main.yml
@ -10,9 +10,10 @@
  tags:
  - dovecot

- name: Generate Diffie-Hellman parameters with the default size 4096 bits (may take several minutes)
+- name: Generate 4096 bits Diffie-Hellman parameters (may take several minutes)
  openssl_dhparam:
    path: /etc/ssl/dhparams.pem
+    size: 4096

 - name: disable pam auth
  replace: