{
  pkgs,
  config,
  lib,
  ...
}: let
  service = "msmtp";
  cfg = config.homelab.${service};
  sec = config.sops.secrets;
in {
  options.homelab.${service} = {
    enable = lib.mkEnableOption "enables zfs";
  };

  config = lib.mkIf cfg.enable {
    services.mail.sendmailSetuidWrapper.enable = true;

    programs.${service} = {
      enable = true;
      setSendmail = true;

      defaults = {
        aliases = "/etc/aliases";
        port = 587;
        auth = "plain";
        tls = "on";
        tls_starttls = "on";
      };

      accounts.default = {
        host = "smtp.mail.me.com";
        user = "bdhelderman@icloud.com";
        from = "alerts@blakedheld.xyz";
        passwordeval = "/run/current-system/sw/bin/cat ${sec."email_pass".path}";
      };
    };

    environment.etc.aliases.text = ''
      root: me@blakedheld.xyz
      blake: me@blakedheld.xyz
    '';

    sops.secrets = {
      "email_pass" = {
        owner = "blake";
        group = "blake";
      };
    };
  };
}