diff --git a/modules/homelab/postfix/default.nix b/modules/homelab/postfix/default.nix
index ea99f7b..bc4e7c7 100644
--- a/modules/homelab/postfix/default.nix
+++ b/modules/homelab/postfix/default.nix
@@ -63,9 +63,9 @@ in {
       settings.main = {
         relayHost = ["smtp.gmail.com:${toString cfg.port}"];
         smtp_use_tls = "yes";
-        smtp_tls_security_level = "may";
+        smtp_tls_security_level = "encrypt";
         smtp_sasl_auth_enable = "yes";
-        smtp_sasl_security_options = "";
+        smtp_sasl_security_options = "noanonymous";
         smtp_sasl_password_maps = "texthash:${config.sops.secrets."postfix_passwd".path}";
         # optional: Forward mails to root (e.g. from cron jobs, smartd)
         # to me privately and to my work email: