From: Alex Dehnert <alex@dehnerts.com>
Date: Sat, 18 Jul 2026 19:57:39 +0000 (+0000)
Subject: Require TLS for connecting
X-Git-Url: https://dehnerts.com/gitweb/?a=commitdiff_plain;h=refs%2Fheads%2Fmaster;p=sysconfig%2Fdovecot.git

Require TLS for connecting

There's no excuse for using IMAP or POP3 without TLS at this point. I thought
that port was an unambiguous "use TLS" indicator, but apparently I use the
imap/143 with ~STARTTLS (commit 8626ddaf5ec4 in adehnert-sysconfig/salt) with
Alpine, so seems good to enforce this on the server.
---

diff --git a/conf.d/10-ssl.conf b/conf.d/10-ssl.conf
index 3eb0629..9e3f49f 100644
--- a/conf.d/10-ssl.conf
+++ b/conf.d/10-ssl.conf
@@ -3,7 +3,7 @@
 ##
 
 # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>
-ssl = yes
+ssl = required
 
 # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
 # dropping root privileges, so keep the key file unreadable by anyone but