{...}:
/*
Known issues:

- when the acme cert gets refreshed, you need to manually restart dovecot
- when restarting dovecot, it might hang, in that case do:
      systemctl --job-mode=ignore-dependencies restart dovecot2 postfix
*/
{
  mailserver = {
    enable = true;
    monitoring = {
      enable = false;
      alertAddress = "bsima@me.com";
    };
    fqdn = "simatime.com";
    domains = ["simatime.com" "bsima.me"];
    certificateScheme = 3; # let's encrypt
    enableImap = true;
    enablePop3 = true;
    enableImapSsl = true;
    enablePop3Ssl = true;
    enableManageSieve = true;
    virusScanning = false; # ur on ur own
    localDnsResolver = true;

    loginAccounts = {
      "ben@simatime.com" = {
        hashedPasswordFile = "/home/ben/hashed-mail-password";
        aliases = [
          # my default email
          "ben@bsima.me"
          # admin stuff
          "postmaster@simatime.com"
          "abuse@simatime.com"
        ];
        catchAll = ["simatime.com" "bsima.me"];
        quota = "10G";
      };
      "dev@simatime.com" = {
        hashedPasswordFile = "/home/ben/hashed-mail-password";
        aliases = ["dev@bsima.me"];
        quota = "10G";
      };
      "nick@simatime.com" = {
        hashedPassword = "$6$31P/Mg8k8Pezy1e$Fn1tDyssf.1EgxmLYFsQpSq6RP4wbEvP/UlBlXQhyKA9FnmFtJteXsbJM1naa8Kyylo8vZM9zmeoSthHS1slA1";
        aliases = ["nicolai@simatime.com"];
        quota = "1G";
      };
    };
  };
}