mailu/core/nginx
Florent Daigniere 74c5e92628 Switch to ffdhe3072 to enable RFC 7919
The idea being:
- it's a "nothing up my sleeves" group
- it may help shave off some bytes of the SSL handshake; That being
said, I doubt that clients that are modern enough to support this RFC
won't offer an EC kex

https://raw.githubusercontent.com/internetstandards/dhe_groups/master/ffdhe3072.pem
..
conf Switch to ffdhe3072 to enable RFC 7919
static set expire headers only for mailu content
Dockerfile Update alpine-linux to 3.14.5 - Zlib security FIX
certwatcher.py Use environment variables for cert paths/names in nginx certwatcher
config.py ghostwheel42's suggestions
letsencrypt.py ghostwheel42's suggestion
start.py Add certificate watcher for external certs to reload nginx