Controls TLS requirements for incoming connections to Postfix services managed by Virtualmin. Opportunistic TLS sets smtpd_tls_security_level to may, offering encryption when supported while allowing unencrypted connections. Mandatory TLS sets the same option to encrypt and rejects connections that cannot use TLS, which may prevent delivery from mail servers without TLS support.