{ base-domain, ... }:
let
  fqdn = "mail.${base-domain}";
in
{
  mailserver = {
    enable = true;
    inherit fqdn;
    domains = [ base-domain ];

    loginAccounts = {
      "khais.colin@${base-domain}" = {
        # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
        hashedPasswordFile = "/etc/nixos/secrets/mailserver/khais.colin.hashpassword";
      };
    };

    certificateScheme = "acme-nginx";
  };
}