{ config, lib, pkgs, ... }:
let
  cfg = config.orbekk.postfix;
in
{
  options = {
    orbekk.postfix = {
      enable = lib.mkEnableOption "Enable postfix config";
    };
  };

  config = lib.mkIf cfg.enable {
    services.postfix = {
      enable = true;
      hostname = "${config.networking.hostName}.orbekk.com";
      config = {
        relayhost = "[smtp.fastmail.com]:465";
        smtp_sasl_auth_enable = true;
        smtp_sasl_security_options = "noanonymous";
        smtp_use_tls = true;
        smtp_sasl_password_maps = "hash:/opt/secret/postfix-sasl-passwd";
        smtp_tls_wrappermode = "yes";
        smtp_tls_security_level = lib.mkForce "encrypt";
      };
    };
  };
}