{ }: rec {
  fqdn = "mail.owo.monster";
  domains = [ "owo.monster" "kitteh.pw" "mailchaos.net" ];

  debug_mode = false;

  ssl_config = {
    cert = "/var/lib/acme/${fqdn}/fullchain.pem";
    key = "/var/lib/acme/${fqdn}/key.pem";
  };

  # generate password files with: 
  # nix run nixpkgs.apacheHttpd -c htpasswd -nbB "" "password" | cut -d: -f2

  accounts = {
    "chaoticryptidz@owo.monster" = {
      name = "chaoticryptidz@owo.monster";
      passwordFile = "/secrets/chaos-mail-password";
      aliases = [
        "all@owo.monster"
        # for sending from
        "chaos@owo.monster"

        # legacy - to be deprecated by 2023-01-01 
        "kitteh@owo.monster"
        "kitteh@kitteh.pw"
      ];
      sieveScript = null;
    };
  };

  sieve_directory = "/var/sieve";
  dkim_directory = "/var/dkim";

  policyd_config = "";

  vmail_config = {
    user_group_name = "vmail";
    user_group_id = 5000;
    directory = "/home/vmail";
  };
}