feat(mail): basic config

configuration.nix

@@ -24,8 +24,8 @@ in
     ./postgresql.nix
 
     (import ./sourcehut.nix { inherit base-domain; })
-
     (import ./paperless.nix { inherit base-domain lib; })
+    (import ./mailserver.nix { inherit base-domain; })
 
     ./userprogs.nix
   ];

mailserver.nix

@@ -0,0 +1,20 @@
+{ base-domain, ... }:
+let
+  fqdn = "mail.${base-domain}";
+in
+{
+  mailserver = {
+    enable = true;
+    inherit fqdn;
+    domains = [ base-domain ];
+
+    loginAccounts = {
+      "khais.colin@${base-domain}" = {
+        # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
+        hashedPasswordFile = "/etc/nixos/secrets/mailserver/khais.colin.hashpassword";
+      };
+    };
+
+    certificateScheme = "acme-nginx";
+  };
+}