Mastering Nginx

Using the Mail Module

[ 48 ]

The signed certificate is shown in the following screenshot.

Please note, though, that a self-signed certificate will generate an

error in a client that connects to your server. If you are deploying

this certificate on a production server, make sure that you get it

signed by a recognized authority.

Complete mail example

Mail services are often combined on one gateway. The following configuration will

enable NGINX to service POP3, IMAP, and SMTP traffic (as well as their encrypted
variants) from one authentication service, while offering clients the option to use

STLS/STARTTLS on unencrypted ports:

events {

worker_connections 1024;

}

mail {

server_name mail.example.com;

auth_http localhost:9000/auth;

proxy on;

ssl_prefer_server_ciphers on;

ssl_protocols TLSv1 SSLv3;

ssl_ciphers HIGH:!ADH:!MD5:@STRENGTH;