Enable mod_md fetched ACME TLS Certificates

2021-12-05 14:47:01 -06:00
parent 9ef51a9b8c
commit f4151abc3f
4 changed files with 33 additions and 0 deletions
--- a/templates/Fedora/35/etc/dovecot/local.conf
+++ b/templates/Fedora/35/etc/dovecot/local.conf
@@ -4,3 +4,5 @@ mail_privileged_group = mail
 first_valid_uid = 0
 mail_uid = mail
 mail_gid = mail
+ssl_mmin_protocol = TLSv1.2
+ssl_cipher_list = PROFILE=SYSTEM
--- a/templates/Fedora/35/usr/lib/systemd/system/dovecot-copytls.service
+++ b/templates/Fedora/35/usr/lib/systemd/system/dovecot-copytls.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Copy TLS Certificates for Dovecot
+
+[Service]
+Type=oneshot
+ExecStartPre=mkdir -p /etc/dovecot/certificates
+ExecStart=/bin/bash -lc 'cp /etc/httpd/md/domains/*/*.pem /etc/dovecot/certificates/'
+ExecStartPost=chown -R root:root /etc/dovecot/certificates
+
+[Install]
+WantedBy=dovecot.service
+
--- a/templates/Fedora/35/usr/lib/systemd/system/dovecot-copytls.timer
+++ b/templates/Fedora/35/usr/lib/systemd/system/dovecot-copytls.timer
@@ -0,0 +1,9 @@
+[Unit]
+Description=Copy TLS Certificates for Dovecot
+
+[Timer]
+OnUnitActiveSec=5min
+
+[Install]
+WantedBy=dovecot.service
+