Incoming mail server has certificate error

You won’t need the variations above but you will still need the TLS config found in samples/mail-receiver.yml, modified for your domain name, in order to support TLS encryption.

Assuming you’re using the Let’s Encrypt template for https, the lines from the sample just need to be uncommented with the domain name replaced.