{config, ...}:
with config.constants; let
  mailSecret = "mail/${userName}/password";
in {
  mailserver = {
    enable = true;
    fqdn = "mail.${domain}";
    domains = [domain];

    loginAccounts = {
      "${userName}@${domain}" = {
        aliases = [postMaster];
        hashedPasswordFile = config.sops.secrets.${mailSecret}.path;
      };
    };

    certificateScheme = "acme";
  };
  sops.secrets.${mailSecret} = {};
}