{ config, ... }:
{
  security.acme = {
    acceptTerms = true;
    defaults.email = "postmaster@billenius.com";
  };
  networking.firewall.allowedTCPPorts = [ 80 ];
  services.nginx.virtualHosts.${config.mailserver.fqdn}.enableACME = true;

  mailserver = {
    enable = true;
    fqdn = "mail.billenius.com";
    domains = [ "billenius.com" ];
    certificateScheme = "acme";

    # A list of all login accounts. To create the password hashes, use
    # nix-shell -p mkpasswd --run 'mkpasswd -s'
    loginAccounts = {
      "love@billenius.com" = {
        hashedPasswordFile = "${../../../resources/mail-server}/love@billenius.com";
        aliases = [ "postmaster@billenius.com" ];
      };
    };
  };
}