The SMTP server certificate is managed by Let's encrypt.
It's renewed by a timer on Dwellers introduced in cd39c567ec4f.
When renewed, it's only available for nginx, but must also be
deployed to the LXC mailserver container to be accessible by Postfix.
There is a work in progress to automate the process: as Let's encrypt
renew code runs in a Docker container without access to the LXC mail
container, we want to check file hashes to copy and restart when needed.
Meanwhile, this change allows manual certificate propagation.