ssl = required
ssl_server_cert_file = dovecot.rsa.crt
ssl_server_key_file = dovecot.rsa.key
ssl_server_dh_file = dhparams.pem
ssl_min_protocol = TLSv1.2
ssl_cipher_list = DEFAULT@SECLEVEL=2