diff --git a/mastus/letsencrypt.nix b/mastus/letsencrypt.nix
index 8aac8cd..321cc1f 100644
--- a/mastus/letsencrypt.nix
+++ b/mastus/letsencrypt.nix
@@ -19,6 +19,9 @@
         --default_root $PWD/acmeroot \
         -f account_key.json -f fullchain.pem -f key.pem \
         --email gebner@gebner.org
+
+      cp key.pem key-dovecot.pem
+      chown dovecot2 key-dovecot.pem
     '';
 
     startAt = "04:00";