{ ... }:
let
  db_pass = import ../config/_passwords.nix;
in
{
  my-lxc.mail = {
    container = {
      cores = 1;
      memory = 512;
      disk = "4G";
      swap = 512;
    };
    system = {
      port = 80;
      additionalPorts = [
        25 # smtp
        465 # smtps
      ];
      services.postfix = {
        enable = true;
        enableSubmission = true;
        enableSubmissions = true;
        mailname = "mail.m0rel.eu";
        domain = "plg.m0rel.eu";
      };
    };
    logging = {
      enable = true;
      metricsEnable = true;
    };
    private = true; # available only on private lan
    auth = false; # auth overlay
  };
}