{
  networking.firewall.allowedTCPPorts = [
    80
    443
  ];

  security.acme = {
    acceptTerms = true;
    defaults.email = "postmaster@billenius.com";
  };

  my.dns.strictDNSSEC = true;

  imports = [
    ./autodiscover.nix
    ./mail.nix
    ./mobileconfig.nix
    ./radicale.nix
    ./roundcube.nix
  ];
}