From 9254d5ef367d4278e212ea75b5b5f58608ab245c Mon Sep 17 00:00:00 2001
From: Florian Probst <flo@probstl.de>
Date: Wed, 2 Jan 2019 09:50:52 +0100
Subject: [PATCH] added ca-certs and tls authentication (#9)

---
 run.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/run.sh b/run.sh
index 98e192c..3d70d0f 100644
--- a/run.sh
+++ b/run.sh
@@ -47,6 +47,8 @@ if [ ! -z "$RELAYHOST" ]; then
 		postmap hash:/etc/postfix/sasl_passwd
 		postconf -e "smtp_sasl_auth_enable=yes"
 		postconf -e "smtp_sasl_password_maps=hash:/etc/postfix/sasl_passwd"
+		postconf -e "smtp_tls_CAfile=/etc/ssl/certs/ca-certificates.crt"
+		postconf -e "smtp_enforce_tls=yes"
 		postconf -e "smtp_sasl_security_options=noanonymous"
 	else
 		echo " without any authentication. Make sure your server is configured to accept emails coming from this IP."