services.postfix.settings.main.smtp_tls_CAfile

File containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates.

Defaults to the system CA bundle that is managed through the security.pki options.

https://www.postfix.org/postconf.5.html#smtp_tls_CAfile

Type
absolute path
Default
config.security.pki.caBundle
Example
${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt
Declared
<nixpkgs/nixos/modules/services/mail/postfix.nix>