summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--roles/IMAP-proxy/files/etc/stunnel/roundcube.conf2
-rw-r--r--roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j22
-rw-r--r--roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j22
-rw-r--r--roles/common/templates/etc/stunnel/bacula-fd.conf.j22
-rw-r--r--roles/common/templates/etc/stunnel/munin-node.conf.j22
-rw-r--r--roles/munin-master/templates/etc/stunnel/munin-master.conf.j22
-rw-r--r--roles/webmail/templates/etc/stunnel/postfix.conf.j22
7 files changed, 14 insertions, 0 deletions
diff --git a/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf b/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf
index 307a5c2..284bcc0 100644
--- a/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf
+++ b/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf
@@ -35,6 +35,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE
diff --git a/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 b/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2
index e678e47..4dbb1db 100644
--- a/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2
+++ b/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2
@@ -35,6 +35,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE
diff --git a/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2 b/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2
index e137536..767424a 100644
--- a/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2
+++ b/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2
@@ -33,6 +33,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE
diff --git a/roles/common/templates/etc/stunnel/bacula-fd.conf.j2 b/roles/common/templates/etc/stunnel/bacula-fd.conf.j2
index d9fe04b..ed819c0 100644
--- a/roles/common/templates/etc/stunnel/bacula-fd.conf.j2
+++ b/roles/common/templates/etc/stunnel/bacula-fd.conf.j2
@@ -33,6 +33,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE
diff --git a/roles/common/templates/etc/stunnel/munin-node.conf.j2 b/roles/common/templates/etc/stunnel/munin-node.conf.j2
index e4188fc..83614b5 100644
--- a/roles/common/templates/etc/stunnel/munin-node.conf.j2
+++ b/roles/common/templates/etc/stunnel/munin-node.conf.j2
@@ -33,6 +33,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE
diff --git a/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2 b/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2
index 51c5dca..bbe4114 100644
--- a/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2
+++ b/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2
@@ -35,6 +35,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE
diff --git a/roles/webmail/templates/etc/stunnel/postfix.conf.j2 b/roles/webmail/templates/etc/stunnel/postfix.conf.j2
index 722497a..9003686 100644
--- a/roles/webmail/templates/etc/stunnel/postfix.conf.j2
+++ b/roles/webmail/templates/etc/stunnel/postfix.conf.j2
@@ -35,6 +35,8 @@ options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
+options = NO_COMPRESSION
+
; These options provide additional security at some performance degradation
options = SINGLE_ECDH_USE
options = SINGLE_DH_USE