nix-config-tn/nixos/hosts/common/optional/maddy.nix

{ inputs, outputs, config, ... }: {

  # init secret
  config.sops.secrets."system/mail/maddy/envFile" = {
    sopsFile = ./maddy.sops.yaml;
    owner = "maddy";
    group = "maddy";
  };

  # Restart dnscrypt when secret changes
  config.sops.secrets."system/mail/maddy/envFile".restartUnits = [ "maddy" ];


  # 
  config.services.maddy = {
    enable = true;
    secrets = [ config.sops.secrets."system/mail/maddy/envFile".path ];
    config = builtins.readFile ./maddy.conf;

  };

}