feat: Add TLS ciphers option

closes #2175
outline · Jun 12, 2021 · d121301 · d121301
1 parent 25f745e
commit d121301
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/.env.sample b/.env.sample
@@ -129,6 +129,8 @@ SMTP_USERNAME=
 SMTP_PASSWORD=
 SMTP_FROM_EMAIL=
 SMTP_REPLY_EMAIL=
+SMTP_TLS_CIPHERS=
+SMTP_SECURE=true
 
 # Custom logo that displays on the authentication screen, scaled to height: 60px
 # TEAM_LOGO=https://example.com/images/logo.png

diff --git a/app.json b/app.json
@@ -135,6 +135,15 @@
       "description": "wikireply@example.com (optional)",
       "required": false
     },
+    "SMTP_SECURE": {
+      "value": "true",
+      "description": "Use a secure SMTP connection (optional)",
+      "required": false
+    },
+    "SMTP_TLS_CIPHERS": {
+      "description": "Override SMTP cipher configuration (optional)",
+      "required": false
+    },
     "GOOGLE_ANALYTICS_ID": {
       "description": "UA-xxxx (optional)",
       "required": false

diff --git a/server/mailer.js b/server/mailer.js
@@ -178,6 +178,10 @@ export class Mailer {
             ? process.env.SMTP_SECURE === "true"
             : process.env.NODE_ENV === "production",
         auth: undefined,
+        tls:
+          "SMTP_TLS_CIPHERS" in process.env
+            ? { ciphers: process.env.SMTP_TLS_CIPHERS }
+            : undefined,
       };
 
       if (process.env.SMTP_USERNAME) {