diff --git a/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf b/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf
index bf93057..86878b5 100644
--- a/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf
+++ b/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf
@@ -44,9 +44,11 @@ ssl = yes
 
 # DH parameters length to use.
 #ssl_dh_parameters_length = 1024
+ssl_dh=</etc/dovecot/dh.pem
 
 # SSL protocols to use
 #ssl_protocols = !SSLv3
+ssl_min_protocol = TLSv1.2
 
 # SSL ciphers to use
 #ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL