diff --git a/mail-server/dovecot.nix b/mail-server/dovecot.nix
index c75aff2..64a13b2 100644
--- a/mail-server/dovecot.nix
+++ b/mail-server/dovecot.nix
@@ -307,6 +307,12 @@ in
         }
 
         service quota-status {
+          inet_listener {
+            port = 0
+          }
+          unix_listener quota-status {
+            user = postfix
+          }
           vsz_limit = ${builtins.toString cfg.quotaStatusMemoryLimit} MB
         }
 
diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix
index 63ade37..db3e581 100644
--- a/mail-server/postfix.nix
+++ b/mail-server/postfix.nix
@@ -268,7 +268,7 @@ in
           "check_recipient_access ${mappedFile "denied_recipients"}"
           "check_recipient_access ${mappedFile "reject_recipients"}"
           # quota checking
-          "check_policy_service inet:localhost:12340"
+          "check_policy_service unix:/run/dovecot2/quota-status"
         ];
 
         # TLS settings, inspired by https://github.com/jeaye/nix-files