diff --git a/roles/mail_server/defaults/main.yml b/roles/mail_server/defaults/main.yml
index 072780103bfbbade272bc04a9e160619e942f6c6..33880c399666bb3f292c9504fc35440f9b0c12f4 100644
--- a/roles/mail_server/defaults/main.yml
+++ b/roles/mail_server/defaults/main.yml
@@ -12,4 +12,7 @@ smtp_rbl: []
 mail_postmaster: "postmaster@{{ ansible_domain }}"
 smtp_allow_relay_from: []
 local_mail_aliases: {}
-imap_max_user_connections_per_ip: 10
\ No newline at end of file
+imap_max_user_connections_per_ip: 10
+mail_server_tls_protocols:
+  - "TLSv1.2"
+mail_server_tls_ciphers: "DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:!aNULL:!MD5:!EXPORT"
\ No newline at end of file