@@ -23,6 +23,8 @@ upgrade_config_set_value 'UPGRADE_UPDATE_MAIL_TEMPLATES' 'false'
2323upgrade_config_set_value ' UPGRADE_REBUILD_USERS' ' true'
2424upgrade_config_set_value ' UPGRADE_UPDATE_FILEMANAGER_CONFIG' ' false'
2525
26+ os_release=" $( lsb_release -s -i | tr " [:upper:]" " [:lower:]" ) -$( lsb_release -s -r) "
27+
2628if [ " $IMAP_SYSTEM " = " dovecot" ]; then
2729 if ! grep -qw " ^extra_groups = mail$" /etc/dovecot/conf.d/10-master.conf 2> /dev/null; then
2830 sed -i " s/^service auth {/service auth {\n extra_groups = mail\n/g" /etc/dovecot/conf.d/10-master.conf
@@ -43,17 +45,20 @@ if [ -f /etc/fail2ban/jail.local ]; then
4345fi
4446
4547if [ " $MAIL_SYSTEM " = " exim4" ]; then
46- echo " [ * ] Disable SMTPUTF8 for Exim for now"
47- if ! grep -qw " ^smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template 2> /dev/null; then
48- sed -i " /^domainlist local_domains = dsearch;\/etc\/exim4\/domains/i smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template
48+ if [ " $os_release " != " debian-10" ]; then
49+ # Exclude Debian 10...
50+ echo " [ * ] Disable SMTPUTF8 for Exim for now"
51+ if ! grep -qw " ^smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template 2> /dev/null; then
52+ sed -i " /^domainlist local_domains = dsearch;\/etc\/exim4\/domains/i smtputf8_advertise_hosts =" /etc/exim4/exim4.conf.template
53+ fi
4954 fi
5055fi
5156
5257# Apply the update for existing users to enable the "Enhanced and Optimized TLS" feature
5358echo ' [ * ] Enable the "Enhanced and Optimized TLS" feature...'
5459
5560# Configuring global OpenSSL options
56- os_release= " $( lsb_release -s -i | tr " [:upper:] " " [:lower:] " ) - $( lsb_release -s -r ) "
61+
5762tls13_ciphers=" TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384"
5863
5964if ! grep -qw " ^[hestia_openssl_sect]$" /etc/ssl/openssl.cnf 2> /dev/null; then
0 commit comments