From bc68646553cf28a50f683ac3f24bbf47b5ca5735 Mon Sep 17 00:00:00 2001
From: Florian Probst <flo@probstl.de>
Date: Sun, 23 Dec 2018 18:36:25 +0100
Subject: [PATCH] added ca-certs and tls authentication

---
 run.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/run.sh b/run.sh
index 98e192c..3d70d0f 100644
--- a/run.sh
+++ b/run.sh
@@ -47,6 +47,8 @@ if [ ! -z "$RELAYHOST" ]; then
 		postmap hash:/etc/postfix/sasl_passwd
 		postconf -e "smtp_sasl_auth_enable=yes"
 		postconf -e "smtp_sasl_password_maps=hash:/etc/postfix/sasl_passwd"
+		postconf -e "smtp_tls_CAfile=/etc/ssl/certs/ca-certificates.crt"
+		postconf -e "smtp_enforce_tls=yes"
 		postconf -e "smtp_sasl_security_options=noanonymous"
 	else
 		echo " without any authentication. Make sure your server is configured to accept emails coming from this IP."