diff --git a/roles/mail/templates/postfix/ldap-aliases.cf.j2 b/roles/mail/templates/postfix/ldap-aliases.cf.j2
index 696ef38..589885d 100644
--- a/roles/mail/templates/postfix/ldap-aliases.cf.j2
+++ b/roles/mail/templates/postfix/ldap-aliases.cf.j2
@@ -1,6 +1,6 @@
 server_host = {{ ldap_uri }}
-#tls_ca_cert_file = TODO
-#tls_require_cert = yes
+tls_ca_cert_file = {{ ldap_ca }}
+tls_require_cert = yes
 bind = yes
 bind_dn = {{ ldap_binddn }}
 bind_pw = {{ ldap_bindpw }}
diff --git a/roles/mail/templates/postfix/ldap-virtual-maps.cf.j2 b/roles/mail/templates/postfix/ldap-virtual-maps.cf.j2
index b648fc1..0bd9d3a 100644
--- a/roles/mail/templates/postfix/ldap-virtual-maps.cf.j2
+++ b/roles/mail/templates/postfix/ldap-virtual-maps.cf.j2
@@ -1,6 +1,6 @@
 server_host = {{ ldap_uri }}
-#tls_ca_cert_file = TODO
-#tls_require_cert = yes
+tls_ca_cert_file = {{ ldap_ca }}
+tls_require_cert = yes
 bind = yes
 bind_dn = {{ ldap_binddn }}
 bind_pw = {{ ldap_bindpw }}