diff --git a/handlers/restart_services.yml b/handlers/restart_services.yml
index a21fbd197c..66e49d7d4a 100644
--- a/handlers/restart_services.yml
+++ b/handlers/restart_services.yml
@@ -90,6 +90,9 @@
 - name: rebuild postfix transport
   command: /usr/sbin/postmap /etc/postfix/transport
 
+  - name: rebuild postfix tls_policy
+  command: /usr/sbin/postmap /etc/postfix/tls_policy
+
 - name: restart glusterd
   service: name=glusterd state=restarted
 
diff --git a/roles/base/tasks/postfix.yml b/roles/base/tasks/postfix.yml
index 07a4a9474e..f1b31cf6cb 100644
--- a/roles/base/tasks/postfix.yml
+++ b/roles/base/tasks/postfix.yml
@@ -50,6 +50,9 @@
 - name: create /etc/postfix/tls_policy
   copy: src="postfix/tls_policy" dest=/etc/postfix/tls_policy
   when: inventory_hostname.startswith(('bastion'))
+  notify:
+  - restart postfix
+  - rebuild postfix tls_policy
   tags:
   - postfix