nixos-config/hosts/phantom/email.nix

{
  pkgs,
  inputs,
  config,
  ...
}:
{
  imports = [ inputs.nixos-mailserver.nixosModules.mailserver ];

  mailserver = {
    enable = true;
    fqdn = "lelgenio.com";
    domains = [
      "lelgenio.xyz"
      "git.lelgenio.xyz"
      "lelgenio.com"
      "git.lelgenio.com"
      "social.lelgenio.com"
    ];
    certificateScheme = "acme-nginx";
    # Create passwords with
    # nix-shell -p mkpasswd --run 'mkpasswd -sm bcrypt'
    loginAccounts = {
      "lelgenio@lelgenio.com" = {
        hashedPassword = "$2y$05$z5s7QCXcs5uTFsfyYpwNJeWzb3RmzgWxNgcPCr0zjSytkLFF/qZmS";
        aliases = [
          "postmaster@lelgenio.com"
          "lelgenio@lelgenio.xyz"
          "lelgenio@lelgenio.xyz"
        ];
      };
      "noreply@git.lelgenio.com" = {
        hashedPassword = "$2b$05$TmR1R7ZwXfec7yrOfeBL7u3ZtyXf0up5dEO6uMWSvb/O7LPEm.j0.";
      };
      "noreply@social.lelgenio.com" = {
        hashedPassword = "$2b$05$DcA9xMdvHqqQMZw2.zybI.vfKsQAJtaQ/JB.t9AHu6psstWq97m2C";
      };
    };
  };

  # Prefer ipv4 and use main ipv6 to avoid reverse DNS issues
  services.postfix.extraConfig = ''
    smtp_address_preference = ipv4
  '';

  # Webmail
  services.roundcube = {
    enable = true;
    package = pkgs.roundcube.withPlugins (p: [ p.carddav ]);
    hostName = "mail.lelgenio.com";
    extraConfig = ''
      $config['smtp_host'] = "tls://${config.mailserver.fqdn}:587";
      $config['smtp_user'] = "%u";
      $config['smtp_pass'] = "%p";
      $config['plugins'] = [ "carddav", "archive" ];
    '';
  };
}