diff --git a/roles/shell/files/etc/postfix/main.cf b/roles/shell/files/etc/postfix/main.cf
index 91c04de5..335d1d39 100644
--- a/roles/shell/files/etc/postfix/main.cf
+++ b/roles/shell/files/etc/postfix/main.cf
@@ -16,6 +16,7 @@ smtpd_tls_key_file=/etc/letsencrypt/live/thunix.net-0001/privkey.pem
 smtpd_use_tls=yes
 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
+smtp_tls_security_level = may
 
 # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
 # information on enabling SSL in the smtp client.