pki mail.example.com cert "/etc/ssl/mail.example.com.fullchain.pem"
pki mail.example.com key "/etc/ssl/private/mail.example.com.key"

table aliases        file:/etc/mail/aliases
table passwd         passwd:/etc/mail/passwd
table vdomains       file:/etc/mail/vdomains
table vusers         file:/etc/mail/vusers

listen on all tls pki mail.example.com

action "local" mbox alias <aliases>
action "to-vusers" lmtp "/var/dovecot/lmtp" rcpt-to virtual <vusers>
action "outbound" relay helo mail.example.com

match for local action "local"
match from any for domain <vdomains> action "to-vusers"
match for any action "outbound"