diff --git a/roles/mail/templates/auth-server/dovecot.yml.j2 b/roles/mail/templates/auth-server/dovecot.yml.j2
index 9483e4b3c737f2435e7fcceb4f1de4ef44557edd..8017b630d2681e9862926406270e1a3617c94736 100644
--- a/roles/mail/templates/auth-server/dovecot.yml.j2
+++ b/roles/mail/templates/auth-server/dovecot.yml.j2
@@ -3,7 +3,7 @@ dovecot:
     - backend: ldap
       params:
         search_base: "uid=%s,ou=People,dc=investici,dc=org,o=Anarchy"
-        search_filter: "(status=active)"
+        search_filter: "(&(status=active)(host={{ shard_id }})(originalHost={{ shard_id }}))"
         scope: "base"
         attrs:
           email: uid