mail-server/ansible/templates/acme-client.conf

authority letsencrypt {
    api url "https://acme-v02.api.letsencrypt.org/directory"
    account key "/etc/acme/letsencrypt-privkey.pem"
}

{% for domain in lookup('vars', inventory_hostname + '_domains') %}
domain "{{ domain }}" {
    domain key "/etc/ssl/private/{{ domain }}.key"
    domain full chain certificate "/etc/ssl/{{ domain }}.fullchain.pem"
    sign with letsencrypt
}
{% endfor %}