How to Deploy MTA-STS ?

Mail server with TLS is support and good working. But not pass test on MTA-STS policy in https://starttls-everywhere.org.

Can you recommend a setting for me?

Sample test.
mydomain.com
MTA-STS
MTA-STS is a standard that will make it more difficult to perform downgrade attacks on communications with your mailserver.

We couldn't find an MTA-STS record for your domain.

Read this https://www.digitalocean.com/community/tutorials/how-to-configure-mta-sts-and-tls-reporting-for-your-domain-using-apache-on-ubuntu-18-04

It might help you.

Read this https://www.digitalocean.com/community/tutorials/how-to-configure-mta-sts-and-tls-reporting-for-your-domain-using-apache-on-ubuntu-18-04

It might help you.

Not for the faint of heart......................