Get certificates
To encrypt traffic with your email server, you'll need TLS certificates.
It is explained in the chapter about httpd.
However, you can use self-signed certificates if you prefer, that is absolutely not an issue. (seel man ssl(8))
In the next parts, we'll consider using letsencrypt certificates to keep consistent.
Just remember to hae a certificate for the domain in the MX field of your server.