diff --git a/mail-server/dovecot.nix b/mail-server/dovecot.nix
index 8f500f7..9145af1 100644
--- a/mail-server/dovecot.nix
+++ b/mail-server/dovecot.nix
@@ -129,6 +129,7 @@ in
 
         mail_access_groups = ${vmailGroupName}
         ssl = required
+        ssl_min_protocol = TLSv1.2
 
         service lmtp {
           unix_listener dovecot-lmtp {