diff --git a/mail-server/dovecot.nix b/mail-server/dovecot.nix index 2780e66..7831b0f 100644 --- a/mail-server/dovecot.nix +++ b/mail-server/dovecot.nix @@ -382,9 +382,14 @@ in "TLS_CHACHA20_POLY1305_SHA256" "TLS_AES_256_GCM_SHA384" # TLS1.2 + # EC key material "ECDHE-ECDSA-AES128-GCM-SHA256" "ECDHE-ECDSA-CHACHA20-POLY1305" "ECDHE-ECDSA-AES256-GCM-SHA384" + # RSA key material + "ECDHE-RSA-AES128-GCM-SHA256" + "ECDHE-RSA-CHACHA20-POLY1305" + "ECDHE-RSA-AES256-GCM-SHA384" ] } ssl_curve_list = X25519MLKEM768:X25519:prime256v1:secp384r1