{pkgs, config, ...}:

###### interface
let
  inherit (pkgs.lib) mkOption mkIf;

  options = {
    services = {
      dovecot = {
        enable = mkOption {
          default = false;
          description = "Whether to enable dovecot POP3/IMAP server.";
        };

        user = mkOption {
          default = "dovecot";
          description = "dovecot user name";
        };
        group = mkOption {
          default = "dovecot";
          description = "dovecot group name";
        };

        sslServerCert = mkOption {
          default = "";
          description = "Server certificate";
        };
        sslCACert = mkOption {
          default = "";
          description = "CA certificate used by server certificate";
        };
        sslServerKey = mkOption {
          default = "";
          description = "Server key";
        };
      };
    };
  };
in

###### implementation

let 
  startingDependency = if config.services.gw6c.enable then "gw6c" else "network-interfaces";

  cfg = config.services.dovecot;

  dovecotConf = 
  ''
    base_dir = /var/run/dovecot/ 

    protocols = imap imaps pop3 pop3s
  ''
  + (if cfg.sslServerCert!="" then
  ''
    ssl_cert_file = ${cfg.sslServerCert}
    ssl_key_file = ${cfg.sslServerKey}
    ssl_ca_file = ${cfg.sslCACert}
  '' else ''
    ssl_disable = yes
    disable_plaintext_auth = no
  '')


  + ''
    login_user = ${cfg.user}
    login_chroot = no

    mail_location = maildir:/var/spool/mail/%u

    maildir_copy_with_hardlinks = yes

    auth default {
      mechanisms = plain login 
      userdb passwd {
      }
      passdb pam {
      }
      user = root 
    }
    auth_debug = yes
    auth_verbose = yes

    pop3_uidl_format = %08Xv%08Xu

    log_path = /var/log/dovecot.log
  ''
  ;
  confFile = pkgs.writeText "dovecot.conf" dovecotConf;

  pamdFile = pkgs.writeText "dovecot.pam" ''
    auth        include common
    account     include common
  '';

in

mkIf config.services.dovecot.enable {

  require = [
    options
  ];

  environment = {
    etc = [{
      source = pamdFile;
      target = "pam.d/dovecot";
    }];
  };

  users = {
    extraUsers = [{
      name = cfg.user;
      uid = config.ids.uids.dovecot;
      description = "Dovecot user";
      group = cfg.group;
    }];
    extraGroups = [{
      name = cfg.group;
      gid = config.ids.gids.dovecot;
    }];
  };

  services = {
    extraJobs = [{
      name = "dovecot";

      job = ''
        description "Dovecot IMAP/POP3 server"

        start on ${startingDependency}/started
        stop on never

        start script
          ${pkgs.coreutils}/bin/mkdir -p /var/run/dovecot /var/run/dovecot/login 
          ${pkgs.coreutils}/bin/chown -R ${cfg.user}.${cfg.group} /var/run/dovecot
        end script 

        respawn ${pkgs.dovecot}/sbin/dovecot -F -c ${confFile}
      '';

    }];
  };
}