From 3d214d0e8eb8ed5b82056ada058d3b4fa6a3c19d Mon Sep 17 00:00:00 2001
From: Matt Birkholz <matt@birchwood-abbey.net>
Date: Sat, 20 Jun 2026 15:16:01 -0600
Subject: [PATCH] Disable IMAP on Core; require IMAPs.

---
 README.org                  | 1 +
 roles_t/core/tasks/main.yml | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/README.org b/README.org
index 1753c46..c83c41e 100644
--- a/README.org
+++ b/README.org
@@ -3334,6 +3334,7 @@ and enables it to start at every reboot.
       <<dovecot-tls>>
       ssl_server_cert_file = /etc/server.crt
       ssl_server_key_file = /etc/server.key
+      <<dovecot-ports>>
       <<dovecot-maildir>>
     dest: /etc/dovecot/local.conf
   when:
diff --git a/roles_t/core/tasks/main.yml b/roles_t/core/tasks/main.yml
index b955426..3767a1f 100644
--- a/roles_t/core/tasks/main.yml
+++ b/roles_t/core/tasks/main.yml
@@ -399,6 +399,11 @@
       ssl = required
       ssl_server_cert_file = /etc/server.crt
       ssl_server_key_file = /etc/server.key
+      service imap-login {
+        inet_listener imap {
+          port = 0
+        }
+      }
       mail_driver = maildir
       mail_path = ~/Maildir
       mail_inbox_path = ~/Maildir
-- 
2.47.3