Well, if you copy the key pair from the dovecot container to your host and backup those files, too, you don’t have to enter the container each time as you can simply backup the relevant mails from the vmail dir and decrypt them in case if you really need to
private_key_path=/mail_crypt/ecprivkey.pem
public_key_path=/mail_crypt/ecpubkey.pem