|
|
|
@ -21,10 +21,12 @@ http {
|
|
|
|
|
|
|
|
|
|
server {
|
|
|
|
|
listen 80;
|
|
|
|
|
listen [::]:80;
|
|
|
|
|
|
|
|
|
|
# TLS configuration
|
|
|
|
|
{% if TLS and not TLS_ERROR %}
|
|
|
|
|
listen 443 ssl;
|
|
|
|
|
listen [::]:443 ssl;
|
|
|
|
|
include /etc/nginx/tls.conf;
|
|
|
|
|
ssl_session_cache shared:SSLHTTP:50m;
|
|
|
|
|
add_header Strict-Transport-Security max-age=15768000;
|
|
|
|
@ -90,6 +92,7 @@ mail {
|
|
|
|
|
|
|
|
|
|
server {
|
|
|
|
|
listen 25;
|
|
|
|
|
listen [::]:25;
|
|
|
|
|
{% if TLS and not TLS_ERROR %}
|
|
|
|
|
starttls on;
|
|
|
|
|
{% endif %}
|
|
|
|
@ -100,6 +103,7 @@ mail {
|
|
|
|
|
{% if not TLS_ERROR %}
|
|
|
|
|
server {
|
|
|
|
|
listen 143;
|
|
|
|
|
listen [::]:143;
|
|
|
|
|
{% if TLS %}
|
|
|
|
|
starttls only;
|
|
|
|
|
{% endif %}
|
|
|
|
@ -110,12 +114,14 @@ mail {
|
|
|
|
|
{% if TLS %}
|
|
|
|
|
server {
|
|
|
|
|
listen 465 ssl;
|
|
|
|
|
listen [::]:465 ssl;
|
|
|
|
|
protocol smtp;
|
|
|
|
|
smtp_auth plain;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
server {
|
|
|
|
|
listen 597;
|
|
|
|
|
listen 587;
|
|
|
|
|
listen [::]:587;
|
|
|
|
|
starttls only;
|
|
|
|
|
protocol smtp;
|
|
|
|
|
smtp_auth plain;
|
|
|
|
@ -123,6 +129,7 @@ mail {
|
|
|
|
|
|
|
|
|
|
server {
|
|
|
|
|
listen 993 ssl;
|
|
|
|
|
listen [::]:993 ssl;
|
|
|
|
|
protocol imap;
|
|
|
|
|
imap_auth plain;
|
|
|
|
|
}
|
|
|
|
|