msmtprc

#
# System wide msmtp configuration file.
#
# VERSION       :0.2.0
# DATE          :2016-10-03
# URL           :https://github.com/szepeviktor/debian-server-tools
# AUTHOR        :Viktor Szépe <viktor@szepe.net>
# LICENSE       :The MIT License (MIT)
# REFS          :http://msmtp.sourceforge.net/doc/msmtprc.txt
# DOCS          :http://msmtp.sourceforge.net/doc/msmtp.html
# LOCATION      :/etc/msmtprc

# Get certificate fingerprint
#     msmtp --serverinfo --tls --tls-certcheck=off --host=mail.szepe.net|grep "SHA1: "
#     openssl s_client -connect mail.szepe.net:465 < /dev/null 2> /dev/null|openssl x509 -noout -fingerprint -sha256
# Aliases file
#     echo "root: admin@szepe.net" > /etc/msmtp.aliases

account default

host mail.szepe.net
# Expiration time: Sun 22 Sep 2019
tls_fingerprint C1:E2:8D:54:3E:FA:DB:8D:04:B9:27:1D:1C:25:66:CB:CB:88:A0:61
port 587
tls_starttls on
#port 465
#tls_starttls off

# SMTP EHLO
domain @@HOSTNAME@@

maildomain @@HOSTNAME@@
auto_from on

add_missing_from_header on
add_missing_date_header on

#     root: admin@szepe.net
aliases /etc/msmtp.aliases

tls on
# Don't trust CA-s when we have certificate fingerprint
#tls_trust_file /etc/ssl/certs/ca-certificates.crt

# http://gnutls.org/manual/html_node/Priority-Strings.html
tls_priorities SECURE192:+SECURE128:+VERS-TLS-ALL:+AES-256-CBC

# Syslog logging with facility LOG_MAIL instead of the default LOG_USER
syslog LOG_MAIL