diff --git a/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf b/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf
index 86878b5..16e0fd8 100644
--- a/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf
+++ b/roles/shell/files/etc/dovecot/conf.d/10-ssl.conf
@@ -9,8 +9,8 @@ ssl = yes
 # dropping root privileges, so keep the key file unreadable by anyone but
 # root. Included doc/mkcert.sh can be used to easily generate self-signed
 # certificate, just make sure to update the domains in dovecot-openssl.cnf
-#ssl_cert = </etc/dovecot/dovecot.pem
-#ssl_key = </etc/dovecot/private/dovecot.pem
+ssl_cert = </etc/letsencrypt/live/thunix.net/fullchain.pem
+ssl_key = </etc/letsencrypt/live/thunix.net/privkey.pem
 
 # If key file is password protected, give the password here. Alternatively
 # give it when starting dovecot with -p parameter. Since this file is often