From a4f960bdae9dc56538f545068646ccac3a0f9979 Mon Sep 17 00:00:00 2001
From: Jean-Donald Roselin <donniecent@live.fr>
Date: Sat, 29 Feb 2020 01:24:09 +0100
Subject: [PATCH 1/2] from now the tls is enabled from main.cf file

---
 assets/install.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/assets/install.sh b/assets/install.sh
index 0b2aaff..a7cd424 100755
--- a/assets/install.sh
+++ b/assets/install.sh
@@ -58,6 +58,7 @@ if [[ -n "$(find /etc/postfix/certs -iname *.crt)" && -n "$(find /etc/postfix/ce
   # /etc/postfix/main.cf
   postconf -e smtpd_tls_cert_file=$(find /etc/postfix/certs -iname *.crt)
   postconf -e smtpd_tls_key_file=$(find /etc/postfix/certs -iname *.key)
+  postconf -e smtpd_tls_security_level=may
   chmod 400 /etc/postfix/certs/*.*
   # /etc/postfix/master.cf
   postconf -M submission/inet="submission   inet   n   -   n   -   -   smtpd"
@@ -127,4 +128,4 @@ cat >> /etc/opendkim/SigningTable <<EOF
 *@$maildomain mail._domainkey.$maildomain
 EOF
 chown opendkim:opendkim $(find /etc/opendkim/domainkeys -iname *.private)
-chmod 400 $(find /etc/opendkim/domainkeys -iname *.private)
\ No newline at end of file
+chmod 400 $(find /etc/opendkim/domainkeys -iname *.private)

From 0b02da3594c4a3e9a03cdc72e6e003bc6e789ddf Mon Sep 17 00:00:00 2001
From: Jean-Donald Roselin <donniecent@live.fr>
Date: Sat, 29 Feb 2020 02:43:27 +0100
Subject: [PATCH 2/2] the tls is tested and working with this configuration

---
 assets/install.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/assets/install.sh b/assets/install.sh
index a7cd424..5fcfb8d 100755
--- a/assets/install.sh
+++ b/assets/install.sh
@@ -58,7 +58,8 @@ if [[ -n "$(find /etc/postfix/certs -iname *.crt)" && -n "$(find /etc/postfix/ce
   # /etc/postfix/main.cf
   postconf -e smtpd_tls_cert_file=$(find /etc/postfix/certs -iname *.crt)
   postconf -e smtpd_tls_key_file=$(find /etc/postfix/certs -iname *.key)
-  postconf -e smtpd_tls_security_level=may
+  postconf -e smtp_tls_security_level=may
+  postconf -e smtp_tls_loglevel=1
   chmod 400 /etc/postfix/certs/*.*
   # /etc/postfix/master.cf
   postconf -M submission/inet="submission   inet   n   -   n   -   -   smtpd"