protocols = imap
listen = *
mail_location = maildir:~/Maildir
auth_mechanisms = plain login
ssl = required
ssl_cert = </etc/letsencrypt/live/{{ vault_public_domain }}/fullchain.pem
ssl_key = </etc/letsencrypt/live/{{ vault_public_domain }}/privkey.pem

passdb {
  driver = pam
}
userdb {
  driver = passwd
}

service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
}