[Dovecot] Config problem: want SSL + local roundcube

[Rich]

Hi,

Have used dovecot for many years, happy that it worked well without me 
needing to do anything much! But since the upgrade from v1 to v2.1.7-7 
I've come across some config probs.

I want IMAP and to force TLS for all internet connections. However, I 
run RoundCube on the same server (over https) and this needs access too, 
but this doesn't need to be TLS because it's local anyway.

The auto-config update script made some changes, it added the following 
to force SSL.

service imap-login {
  inet_listener imap {
    port = 0
  }
}

ssl = required


But this seems to forbid the local roundcube service from logging in.

Can anyone help me with my config? I had a stab, adding the following, 
but it didn't work. Was a complete guess anyway!

remote 127.0.0.1 {
    ssl = no
    service imap-login {
      inet_listener imap {
        port = 143
      }
    }
}


Here's my full config:

# 2.1.7: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-5-amd64 x86_64 Debian 7.2 ext3
auth_default_realm = artfulrobot.com
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_location = maildir:/home/virtual/%d/%n
mail_privileged_group = mail
passdb {
  args = username_format=%n /etc/exim4/virtual_domains/%d/passwords
  driver = passwd-file
}
protocols = imap
service auth {
  unix_listener auth-client {
    group = Debian-exim
    mode = 0660
  }
  user = root
}
service imap-login {
  inet_listener imap {
    port = 0
  }
}
ssl = required
ssl_cert = </etc/ssl/certs/mail.artfulrobot.com-with-chain.crt
ssl_key = </etc/ssl/private/mail.artfulrobot.com.key
userdb {
  args = uid=1001 gid=1001
  driver = static
}
userdb {
  driver = passwd
}


Thanks,

Rich