{config, ...}: let
  cfg = config.mailsystem;
in rec {
  sslCertPath = "${config.security.acme.certs.${cfg.fqdn}.directory}/fullchain.pem";
  sslKeyPath = "${config.security.acme.certs.${cfg.fqdn}.directory}/key.pem";
  sslCertService = ["acme-finished-${cfg.fqdn}.target"];
}