If you're upgrading Dovecot from Debian 9 to 10, note that there is a new way to handle SSL parameters in the configuration. If you don't change your configuration, TLS will fail and you'll not be able to use Dovecot.