ssl = yes
ssl_server {
  cert_file = /etc/dovecot/fullchain.pem
  key_file = /etc/dovecot/privkey.pem
}