mail-server/ansible/roles/ssl/templates/acme-client.conf

# {{ ansible_managed }}
authority letsencrypt {
    api url "https://acme-v02.api.letsencrypt.org/directory"
    account key "/etc/acme/letsencrypt-privkey.pem"
}

{% for domain in domains %}
domain "{{ domain }}" {
    domain key "/etc/ssl/private/{{ domain }}.key"
    domain full chain certificate "/etc/ssl/{{ domain }}.fullchain.pem"
    sign with letsencrypt
}
{% endfor %}