[Dovecot] localhost IMAP & remote IMAPS

I have Dovecot configured to accept only SSL connections right now, but I would like to accept plain IMAP if the connection originates in 127.0.0.1/32 (and still require IMAPS for remote users).

What do I need to define in dovecot.conf to make this work?

Thanks, Hugh