Enable SSL connections for IMAPS and SMTP

roles/shell/files/etc/dovecot/conf.d/10-auth.conf

@@ -7,7 +7,7 @@
 # matches the local IP (ie. you're connecting from the same computer), the
 # connection is considered secure and plaintext authentication is allowed.
 # See also ssl=required setting.
-disable_plaintext_auth = no
+disable_plaintext_auth = yes
 #auth_mechanism = plain login
 
 # Authentication cache size (e.g. 10M). 0 means it's disabled. Note that

roles/shell/tasks/ufw.yml

@@ -10,7 +10,7 @@
     - '79'
     - '80'
     - '113'
-    - '143'
+    - '993'
     - '443'
     - '1356'
     - '5154'
@@ -36,7 +36,7 @@
   with_items:
     - '22'
     - '25'
-    - '587'
+    - '465'
     - '2222'
     - '53'
 

roles/webserver/files/autoconfig.xml

@@ -7,15 +7,15 @@
     <displayShortName>thunix</displayShortName>
     <incomingServer type="imap">
       <hostname>thunix.net</hostname>
-      <port>143</port>
-      <socketType>STARTTLS</socketType>
+      <port>993</port>
+      <socketType>SSL</socketType>
       <authentication>password-cleartext</authentication>
       <username>%EMAILLOCALPART%</username>
     </incomingServer>
     <outgoingServer type="smtp">
       <hostname>thunix.net</hostname>
-      <port>587</port>
-      <socketType>STARTTLS</socketType>
+      <port>465</port>
+      <socketType>SSL</socketType>
       <authentication>password-cleartext</authentication>
       <username>%EMAILLOCALPART%</username>
     </outgoingServer>