katzen-cafe/modules/mailserver.nix

{inputs, ...}: {
  imports = [inputs.simple-nixos-mailserver.nixosModule];
  # hack to fix https://gitlab.com/simple-nixos-mailserver/nixos-mailserver/-/issues/275
  services.dovecot2.sieve.extensions = ["fileinto"];
  mailserver = {
    enable = true;
    fqdn = "mail.katzen.cafe";
    sendingFqdn = "katzen.cafe";
    domains = ["katzen.cafe"];
    loginAccounts = {
      "admin@katzen.cafe" = {
        hashedPasswordFile = "/var/lib/secrets/admin-mail-pw";
        aliases = ["postmaster@katzen.cafe" "abuse@katzen.cafe"];
      };
      "noreply@katzen.cafe" = {
        hashedPasswordFile = "/var/lib/secrets/noreply-mail-pw";
      };
    };
    certificateScheme = "acme-nginx";
  };
  deployment.keys = {
    "admin-mail-pw" = {
      keyCommand = ["pass" "mailpws/hashes/admin"];
      destDir = "/var/lib/secrets";
    };
    "noreply-mail-pw" = {
      keyCommand = ["pass" "mailpws/hashes/noreply"];
      destDir = "/var/lib/secrets";
    };
  };
}