{
  pkgs,
  config,
  sops,
  secrets,
  ...
}:
{
  sops.secrets = {
    "mailpass" = {
      sopsFile = secrets.outPath + "/mail.yaml";
      key = "password";
    };
  };

  accounts.email.accounts.proton = {
    primary = true;
    address = "th.spo@pm.me";
    userName = "thiago@sposito.ch";
    realName = "Thiago Sposito";
    passwordCommand = "${pkgs.coreutils}/bin/cat ${config.sops.secrets.mailpass.path}";
    imap = {
      host = "127.0.0.1";
      port = 1143;
      tls.enable = true;
    };

    smtp = {
      host = "127.0.0.1";
      port = 1025;
      tls.enable = true;
    };

    mbsync = {
      enable = true;
      create = "maildir";
      expunge = "both";
      extraConfig.account = {
        SSLType = "STARTTLS";
        TLSType = "STARTTLS";
        CertificateFile = "~/.config/protonmail/bridge-v3/cert.pem";
        AuthMechs = "LOGIN";
      };
    };

    msmtp = {
      enable = true;
      extraConfig = {
        tls_starttls = "on";
        tls_certcheck = "off";
      };
    };
  };

  programs.mbsync.enable = true;
  programs.msmtp.enable = true;
  programs.mu.enable = true;
}