1. smtp_tls_note_starttls_offer = yes
  2. smtpd_tls_key_file = /etc/ssl/private/mail.pem
  3. smtpd_tls_cert_file = /etc/ssl/certs/mail.pem
  4. smtpd_tls_CAfile = /etc/ssl/ca-cert.pem
  5. smtp_tls_loglevel = 1
  6. smtpd_tls_received_header = yes
  7. smtpd_tls_session_cache_timeout = 3600s
  8. tls_random_source = dev:/dev/urandom
  9. tls_random_prng_update_period = 3600s