[Unit]
Description=Copy TLS Certificates for Postfix

[Service]
Type=oneshot
ExecStartPre=mkdir -p /etc/postfix/certificates
ExecStart=/bin/bash -lc 'cp /etc/httpd/md/domains/{{ postfix_vhost }}/*.pem /etc/postfix/certificates/'
ExecStartPost=chown -R root:root /etc/postfix/certificates

[Install]
WantedBy=postfix.service