Clean branch

linux/singularity/mailserver.nix

@@ -0,0 +1,25 @@
+{ config, ... }:
+
+let
+  dn = config.constants.domain;
+  usr = config.constants.userName;
+  mailSecret = "mail/${usr}/password";
+in
+{
+  mailserver =
+    {
+      enable = true;
+      fqdn = "mail.${dn}";
+      domains = [ dn ];
+
+      loginAccounts = {
+        "${usr}@${dn}" = {
+          aliases = [ config.constants.postMaster ];
+          hashedPasswordFile = config.sops.secrets.${mailSecret}.path;
+        };
+      };
+
+      certificateScheme = "acme";
+    };
+  sops.secrets.${mailSecret} = { };
+}