diff --git a/postfix/templates/main.cf.j2 b/postfix/templates/main.cf.j2
index 6afd5c31c2d7b31427a1ba24c39a6bf45479298c..e0185e304e450707b7e5926defc5afeaa1fae9bb 100644
--- a/postfix/templates/main.cf.j2
+++ b/postfix/templates/main.cf.j2
@@ -47,6 +47,8 @@ smtpd_relay_restrictions =
 	defer_unauth_destination
 
 smtpd_use_tls = yes
+smtp_tls_security_level = may
+smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
 smtpd_tls_security_level = may
 smtpd_tls_auth_only = yes
 smtpd_tls_cert_file = {{ postfix_tls_cert }}