From c2ee9f217ad35a2d614cd978786b8418805ee4e0 Mon Sep 17 00:00:00 2001
From: Benjamin Asbach <4610679-asbachb@users.noreply.gitlab.com>
Date: Wed, 13 May 2020 00:09:10 +0000
Subject: [PATCH] Enabled TLS 1.3 support

---
 mail-server/postfix.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix
index dff0d60..7df34d7 100644
--- a/mail-server/postfix.nix
+++ b/mail-server/postfix.nix
@@ -181,10 +181,10 @@ in
         smtpd_tls_eecdh_grade = ultra
 
         # Disable obselete protocols
-        smtpd_tls_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
-        smtp_tls_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
-        smtpd_tls_mandatory_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
-        smtp_tls_mandatory_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
+        smtpd_tls_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
+        smtp_tls_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
+        smtpd_tls_mandatory_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
+        smtp_tls_mandatory_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3
 
         smtp_tls_ciphers = high
         smtpd_tls_ciphers = high