protocols = imap pop3
listen = *
base_dir = /var/run/dovecot/
auth_mechanisms = plain login
log_path = syslog
log_timestamp = "%b %d %H:%M:%S "
mail_location = maildir:~/Mail
default_login_user = dovenull
default_internal_user = dovecot

disable_plaintext_auth = yes
ssl = required
ssl_cert = </etc/letsencrypt/live/REPLACEME.TLD/fullchain.pem
ssl_key = </etc/letsencrypt/live/REPLACEME.TLD/privkey.pem

passdb {
    driver = pam
    args = session=yes dovecot
}

userdb {
    driver = passwd
}

service pop3-login {
    inet_listener pop3s {
        port = 995
        ssl = yes
    }
}

service imap-login {
    inet_listener imaps {
        port = 993
        ssl = yes
    }
}

service auth {
    unix_listener /var/spool/postfix/private/auth {
        user = postfix
        group = postfix
        mode = 0660
    }
    user = root
}

!include_try conf.d/*.conf