|
1
|
worker_processes auto; |
|
2
|
|
|
3
|
mail { |
|
4
|
server_name smtp.thestablefoundation.org; |
|
5
|
auth_http localhost:8080; |
|
6
|
|
|
7
|
proxy_pass_error_message on; |
|
8
|
|
|
9
|
ssl on; |
|
10
|
ssl_certificate /etc/letsencrypt/live/smtp.thestablefoundation.org/fullchain.pem; |
|
11
|
ssl_certificate_key /etc/letsencrypt/live/smtp.thestablefoundation.org/privkey.pem; |
|
12
|
ssl_protocols TLSv1.2 TLSv1.3; |
|
13
|
ssl_ciphers HIGH:!aNULL:!MD5; |
|
14
|
ssl_session_cache shared:SSL:10m; |
|
15
|
ssl_session_timeout 10m; |
|
16
|
|
|
17
|
# Port 25: INCOMING mail (no auth required) |
|
18
|
server { |
|
19
|
listen 25; |
|
20
|
protocol smtp; |
|
21
|
starttls on; |
|
22
|
proxy on; |
|
23
|
# NO smtp_auth here - accept mail from anyone |
|
24
|
} |
|
25
|
|
|
26
|
# Port 587: OUTGOING mail (auth required for your users) |
|
27
|
server { |
|
28
|
listen 587; |
|
29
|
protocol smtp; |
|
30
|
smtp_auth login plain; |
|
31
|
starttls on; |
|
32
|
proxy on; |
|
33
|
} |
|
34
|
|
|
35
|
server { |
|
36
|
listen 1143; |
|
37
|
protocol imap; |
|
38
|
} |
|
39
|
} |