{config, ...}: {
  imports = [
    ./mailserver.nix
  ];
  services.zulip = {
    enable = true;
    host = "zulip.${config.networking.domain}";
    camoKeyFile = builtins.toString config.age.secrets.zulip-camoKey.path;
    rabbitmqPasswordFile = builtins.toString config.age.secrets.zulip-rabbitmqPassword.path;
    secretKeyFile = builtins.toString config.age.secrets.zulip-secretKey.path;
    sharedSecretKeyFile = builtins.toString config.age.secrets.zulip-sharedSecretKey.path;
    avatarSaltKeyFile = builtins.toString config.age.secrets.zulip-avatarSaltKey.path;
    zulipSettings = {
      ZULIP_ADMINISTRATOR = "admin+zulip@${config.networking.domain}";
      EXTERNAL_HOST = "chat.${config.networking.domain}";
    };
  };
  services.postgresql.enable = true;
  mailserver.loginAccounts = {
    "zulip+admin@${config.networking.domain}" = {
      hashedPasswordFile = builtins.toString config.age.secrets."mailserver-acc-zulip+admin-pw".path;
    };
  };
}