From 092a1d6c2ded67b5308f03e1cf78464e330f0fde Mon Sep 17 00:00:00 2001
From: Georg Lauterbach <44545919+georglauterbach@users.noreply.github.com>
Date: Sat, 28 Mar 2026 20:37:52 +0100
Subject: [PATCH] chore: update Postfix configuration

Signed-off-by: Georg Lauterbach <44545919+georglauterbach@users.noreply.github.com>
---
 target/postfix/main.cf | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/target/postfix/main.cf b/target/postfix/main.cf
index 518e2dc5..978d3681 100644
--- a/target/postfix/main.cf
+++ b/target/postfix/main.cf
@@ -45,7 +45,6 @@ smtp_tls_protocols = !SSLv2,!SSLv3,!TLSv1,!TLSv1.1
 smtpd_tls_mandatory_ciphers = high
 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1,!TLSv1.1
 smtpd_tls_exclude_ciphers = aNULL, SEED, CAMELLIA, RSA+AES, SHA1
-smtpd_tls_dh1024_param_file = /etc/postfix/dhparams.pem
 smtpd_tls_CApath = /etc/ssl/certs
 smtp_tls_CApath = /etc/ssl/certs
 
@@ -118,8 +117,6 @@ header_checks = pcre:/etc/postfix/maps/header_checks.pcre
 # Remove unwanted headers that reveal our privacy
 smtp_header_checks = pcre:/etc/postfix/maps/sender_header_filter.pcre
 
-# The default compatibility_level is 0 - which retains legacy settings defaults:
-# http://www.postfix.org/COMPATIBILITY_README.html
-# If backwards-compatibility log messages appear, fix them by explicitly adding
-# the legacy or new default value (alternatively raise the compatibility_level)
-compatibility_level = 3.6
+# REF: https://www.postfix.org/COMPATIBILITY_README.html
+#      https://www.postfix.org/postconf.5.html#compatibility_level
+compatibility_level = 3.10