# vim: ts=2
{
  description = "Nixos server config";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-22.11-small";
    simple-nixos-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver/nixos-22.11";
  };

  outputs = {
    self,
    nixpkgs,
    simple-nixos-mailserver,
    ...
  } @ attrs: {
    nixosConfigurations."server1" = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      specialArgs = attrs;
      modules = [
        ./hosts/server1/configuration.nix
        simple-nixos-mailserver.nixosModule
        {
          mailserver = {
            enable = true;
            fqdn = "server1.vhack.eu";
            domains = ["vhack.eu"];

            mailDirectory = "/srv/mail/vmail";
            dkimKeyDirectory = "/srv/mail/dkim";
            backup.snapshotRoot = "/srv/mail/backup";

            loginAccounts = {
              "sils@vhack.eu" = {
                hashedPasswordFile = "/srv/mail/.secrets/silsmailpswd";
              };
            };

            extraVirtualAliases = {
              "abuse@vhack.eu" = ["sils@vhack.eu"];
              "postmaster@vhack.eu" = ["sils@vhack.eu"];
              "admin@vhack.eu" = ["sils@vhack.eu"];
            };

            sieveDirectory = "/srv/mail/sieve";
            keyFile = "/var/lib/acme/server1.vhack.eu/key.pem";
            certificateScheme = 1;
            certificateFile = "/var/lib/acme/server1.vhack.eu/fullchain.pem";
          };
        }
      ];
    };
  };
}