{ config, ... }:

let
  dn = config.constants.domain;
  usr = config.constants.userName;
  mailSecret = "mail/${usr}/password";
in
{
  mailserver =
    {
      enable = true;
      fqdn = "mail.${dn}";
      domains = [ dn ];

      loginAccounts = {
        "${usr}@${dn}" = {
          aliases = [ config.constants.postMaster ];
          hashedPasswordFile = config.sops.secrets.${mailSecret}.path;
        };
      };

      certificateScheme = "acme";
    };
  sops.secrets.${mailSecret} = { };
}