{config, ...}: let
  cfg = config.mailsystem;
in rec {
  sslCertPath = "${config.security.acme.certs.${cfg.fqdn}.directory}/fullchain.pem";
  sslKeyPath = "${config.security.acme.certs.${cfg.fqdn}.directory}/key.pem";
  sslCertService = ["acme-finished-${cfg.fqdn}.target"];

  dovecotDynamicStateDir = "/var/lib/dovecot";
  dovecotDynamicPasswdFile = "${dovecotDynamicStateDir}/passwd";
}