katzen-cafe/modules/mailserver.nix

{ inputs, ... }: 
{
  imports = [ inputs.simple-nixos-mailserver.nixosModule ];
  mailserver = {
    enable = true;
    fqdn = "mail.katzen.cafe";
    sendingFqdn = "katzen.cafe";
    domains = [ "katzen.cafe" ];
    loginAccounts = {
      "admin@katzen.cafe" = {
        hashedPasswordFile = "/var/lib/secrets/admin-mail-pw";
        aliases = [ "postmaster@katzen.cafe" "abuse@katzen.cafe" ];
      };
      "noreply@katzen.cafe" = {
        hashedPasswordFile = "/var/lib/secrets/noreply-mail-pw";
      };
    };
    certificateScheme = "acme-nginx";
  };
  deployment.keys = {
    "admin-mail-pw" = {
      keyCommand = [ "pass" "mailpws/hashes/admin" ];
      destDir = "/var/lib/secrets";
    };
    "noreply-mail-pw" = {
      keyCommand = [ "pass" "mailpws/hashes/noreply" ];
      destDir = "/var/lib/secrets";
    };
  };
}