Commit message (Collapse) | Author | Age | Files | |
---|---|---|---|---|
* | postfix-sender-login: Better hardening. | Guilhem Moulin | 2020-05-21 | 1 |
| | | | | Run as a dedicated user, not ‘postfix’. | |||
* | MSA: Update role to Debian Buster. | Guilhem Moulin | 2020-05-19 | 1 |
| | | | | | | | | For `ssl_cipher_list` we pick the suggested value from https://ssl-config.mozilla.org/#server=postfix&version=3.4.10&config=intermediate&openssl=1.1.1d At the moment it's equivalent (modulo order) to adding ‘EDH+AESGCM+aRSA’ to ‘EECDH+AESGCM:EECDH+CHACHA20!MEDIUM!LOW!EXP!aNULL!eNULL’. | |||
* | systemd.service: Tighten hardening options. | Guilhem Moulin | 2018-12-09 | 1 |
| | ||||
* | systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’. | Guilhem Moulin | 2018-12-09 | 1 |
| | | | | And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’. | |||
* | postfix-msa: anonymize SASL-authenticated senders using IPv6. | Guilhem Moulin | 2017-06-06 | 1 |
| | ||||
* | move postfix-sender-login.{service,socket} to files/. | Guilhem Moulin | 2017-06-02 | 2 |
| | ||||
* | MSA: reject null sender address. | Guilhem Moulin | 2017-05-14 | 1 |
| | ||||
* | Configure the Mail Submission Agent. | Guilhem Moulin | 2015-06-07 | 1 |