34 lines
951 B
Plaintext
34 lines
951 B
Plaintext
|
# Trusted users and groups
|
||
|
|
MAIN_TRUSTED_USERS=mail:www-data
|
||
|
|
|
||
|
|
# User account UID range
|
||
|
|
FIRST_USER_ACCOUNT_UID=1000
|
||
|
|
|
||
|
|
# TLS configuration
|
||
|
|
MAIN_TLS_ENABLE=true
|
||
|
|
MAIN_TLS_CERTIFICATE=/var/local/certificates/mail.lunch.org.uk/fullchain.pem
|
||
|
|
MAIN_TLS_PRIVATEKEY=/var/local/certificates/mail.lunch.org.uk/privkey.pem
|
||
|
|
|
||
|
|
# Local settings
|
||
|
|
# CHECK_RCPT_LOCAL_ACL_FILE=/etc/exim4/local_check_rcpt
|
||
|
|
CHECK_DATA_LOCAL_ACL_FILE=/etc/exim4/local_check_data
|
||
|
|
|
||
|
|
# DKIM keys and handling.
|
||
|
|
DKIM_CANON = relaxed
|
||
|
|
DKIM_SELECTOR = 20160621
|
||
|
|
|
||
|
|
# Get the domain from the outgoing mail.
|
||
|
|
DKIM_DOMAIN = ${lc:${domain:$h_from:}}
|
||
|
|
|
||
|
|
# The private key file.
|
||
|
|
DKIM_FILE = ${lookup {DKIM_DOMAIN-private.pem} dsearch,ret=full,filter=file {/etc/exim4/dkim}}
|
||
|
|
|
||
|
|
# If key exists then use it, if not don't.
|
||
|
|
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE} {DKIM_FILE} {0}}
|
||
|
|
|
||
|
|
# Log more TLS info than default.
|
||
|
|
MAIN_LOG_SELECTOR = +tls_peerdn +tls_sni
|
||
|
|
|
||
|
|
# SRS
|
||
|
|
SRS_SECRET = sxN7DlwZMWHar1J;L!wlKwbzc9ECB[F>!LEYm9[LF0
|