nixos-config/linux/singularity/mailserver.nix

{ config, ... }:

let
  dn = config.constants.domain;
  usr = config.constants.userName;
  mailSecret = "mail/${usr}/password";
in
{
  mailserver = {
    enable = true;
    fqdn = "mail.${dn}";
    domains = [ dn ];

    loginAccounts = {
      "${usr}@${dn}" = {
        aliases = [ config.constants.postMaster ];
        hashedPasswordFile = config.sops.secrets.${mailSecret}.path;
      };
    };

    certificateScheme = "acme";
  };
  sops.secrets.${mailSecret} = { };
}