PMG's TLS support uses a self-signed TLS certificate. Is there a way to auto generate & update a Let's encrypt certificate?
Another option: We have a wildcard certificate for our domain, so I could use that if we'd get better results.
I am mostly concerned about TLS support for Postfix, but...