{config, ...}: let
  dn = config.constants.domain;
  usr = config.constants.userName;
  mailSecret = "mail/${usr}/password";
in {
  mailserver = {
    enable = true;
    fqdn = "mail.${dn}";
    domains = [dn];

    loginAccounts = {
      "${usr}@${dn}" = {
        aliases = [config.constants.postMaster];
        hashedPasswordFile = config.sops.secrets.${mailSecret}.path;
      };
    };

    certificateScheme = "acme";
  };
  sops.secrets.${mailSecret} = {};
}