nixfiles/hosts/hetzner-vm/services/mailserver/config.nix

{ }:
let secrets-db = (import ../../secrets-db.nix { });
in rec {
  fqdn = "mail.owo.monster";
  domains = [
    "owo.monster"
    "kitteh.pw"
    # "mailchaos.net"
  ];

  debug_mode = false;

  ssl_config = {
    cert = "/var/lib/acme/${fqdn}/fullchain.pem";
    key = "/var/lib/acme/${fqdn}/key.pem";
  };

  # generate password files with: 
  # nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "password" | cut -d: -f2

  accounts = {
    "chaoticryptidz@owo.monster" = {
      name = "chaoticryptidz@owo.monster";
      passwordFile = "${secrets-db.chaos_mail_passwd.path}";
      aliases = [
        "all@owo.monster"
        # for sending from
        "chaos@owo.monster"

        # TODO: legacy - to be deprecated by 2023-01-01 
        "kitteh@owo.monster"
        "kitteh@kitteh.pw"
      ];
      sieveScript = null;
    };
  };

  sieve_directory = "/var/sieve";
  dkim_directory = "/var/dkim";

  policyd_config = "";

  vmail_config = {
    user_group_name = "vmail";
    user_group_id = 5000;
    directory = "/home/vmail";
  };
}