From cd2d49f1edd67fdd429e837920acfb0796b93d83 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Mon, 21 Apr 2025 23:52:00 +0200
Subject: [PATCH] Reduce logs with TLS sessions by default

---
 mail-server/postfix.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix
index c0bd2fb..f2daa53 100644
--- a/mail-server/postfix.nix
+++ b/mail-server/postfix.nix
@@ -293,8 +293,8 @@ in
         # Allowing AUTH on a non encrypted connection poses a security risk
         smtpd_tls_auth_only = true;
         # Log only a summary message on TLS handshake completion
-        smtp_tls_loglevel = "1";
-        smtpd_tls_loglevel = "1";
+        smtp_tls_loglevel = lib.mkIf cfg.debug "1";
+        smtpd_tls_loglevel = lib.mkIf cfg.debug "1";
 
         # Configure a non blocking source of randomness
         tls_random_source = "dev:/dev/urandom";