From 376f1124fb2a60aef1c9fa1a60dafd031ee9532a Mon Sep 17 00:00:00 2001
From: Markus Katharina Brechtel <markus.katharina.brechtel@thengo.net>
Date: Sat, 16 Sep 2017 08:14:24 +0000
Subject: [PATCH] disable plaintext auth

---
 templates/conf.d/10-auth.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/conf.d/10-auth.conf.j2 b/templates/conf.d/10-auth.conf.j2
index 7c814e0..9d4f062 100644
--- a/templates/conf.d/10-auth.conf.j2
+++ b/templates/conf.d/10-auth.conf.j2
@@ -7,7 +7,7 @@
 # matches the local IP (ie. you're connecting from the same computer), the
 # connection is considered secure and plaintext authentication is allowed.
 # See also ssl=required setting.
-#disable_plaintext_auth = yes
+disable_plaintext_auth = yes
 
 # Authentication cache size (e.g. 10M). 0 means it's disabled. Note that
 # bsdauth, PAM and vpopmail require cache_key to be set for caching to be used.