about summary refs log tree commit diff
path: root/modules/services/mail
diff options
context:
space:
mode:
authorPeter Simons <simons@cryp.to>2012-09-21 12:26:53 +0200
committerPeter Simons <simons@cryp.to>2012-09-21 12:29:36 +0200
commit155495deb2ada2eda99fa4bf809830a0b506e51d (patch)
tree90168c56f351aa631eed3e3c71f201e3080d0b43 /modules/services/mail
parent1da16a5ea112182ffc2d83ee6c42c1b70f96226d (diff)
downloadnixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.tar
nixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.tar.gz
nixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.tar.bz2
nixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.tar.lz
nixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.tar.xz
nixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.tar.zst
nixlib-155495deb2ada2eda99fa4bf809830a0b506e51d.zip
modules/services/mail/dovecot2.nix: accept plain text authentication only over secure channels when TLS is available
Connects from 'localhost' are always considered secure.
Diffstat (limited to 'modules/services/mail')
-rw-r--r--modules/services/mail/dovecot2.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/services/mail/dovecot2.nix b/modules/services/mail/dovecot2.nix
index 14355f51e3db..2054b80d0b14 100644
--- a/modules/services/mail/dovecot2.nix
+++ b/modules/services/mail/dovecot2.nix
@@ -17,6 +17,7 @@ let
       ssl_cert_file = ${cfg.sslServerCert}
       ssl_key_file = ${cfg.sslServerKey}
       ssl_ca_file = ${cfg.sslCACert}
+      disable_plaintext_auth = yes
     '' else ''
       ssl = no
       disable_plaintext_auth = no