diff --git a/roles/mail_server/templates/99-local.conf.j2 b/roles/mail_server/templates/99-local.conf.j2
index f52834b4a3371f2ef83a175107298061f0245b53..bc937a2212a174973e9c93044ca0c351a2c0d689 100644
--- a/roles/mail_server/templates/99-local.conf.j2
+++ b/roles/mail_server/templates/99-local.conf.j2
@@ -31,6 +31,8 @@ service auth {
 # TLS configuration.
 ssl_cert = </etc/ssl/certs/{{ imap_tls_certificate | basename }}
 ssl_key = </etc/ssl/private/{{ imap_tls_key | basename }}
+ssl_protocols = TLSv1.2
+ssl_cipher_list = DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:!aNULL:!MD5:!EXPORT
 ssl = required
 
 # Mail delivery.