diff --git a/services/email/Dockerfile b/services/email/Dockerfile
index 2ab1dc151..95170d572 100644
--- a/services/email/Dockerfile
+++ b/services/email/Dockerfile
@@ -20,7 +20,10 @@ RUN sed -i 's/#login_trusted_networks =/login_trusted_networks = fd00:cafe::\/32
     # The only one user will have its mailbox at /data
     sed -iE 's#mail_location =.*#mail_location = maildir:/data#' /etc/dovecot/conf.d/10-mail.conf && \
     # Disable TLS, managed by tls proxy
-    sed -i 's#ssl = yes#ssl = no#' /etc/dovecot/conf.d/10-ssl.conf && \
+    sed -i -e 's#ssl = yes#ssl = no#' \
+      -e 's/ssl_cert =/#ssl_cert =/' \
+      -e 's/ssl_key =/#ssl_key =/' \
+      /etc/dovecot/conf.d/10-ssl.conf && \
     # User passwd db file, need to be mounted as a secret
     sed -i 's#/etc/dovecot/users#/etc/dovecot/users/users#' /etc/dovecot/conf.d/auth-passwdfile.conf.ext && \
     rm -f /etc/dovecot/users && \