{ config, lib, ... }:

{
  config = lib.mkIf (with config.services.postfix; enable && mapFiles ? sasl_passwd) {
    systemd.tmpfiles.rules = [
      "L+ /var/lib/postfix - - - - /persist/safe/var/lib/postfix"
    ];
  };
}