- New optional ENV variable `DOVECOT_MYSQL_CA`, holding path to the CA certificate of the MySQL server; if set, the connection to MySQL server is TLS-encrypted
- Separation of HAProxy-enabled and HAProxy-ignorant ports; every service port now has a HAProxy-enabled and HAProxy-ignorant variant
- BUGFIX: Proxying for Plaintext authentication to XOAuth2 did not work due to SSL certificate verification