{ pkgs
, lib
, config
, ...
}:
{
  services.postfix = {
    enable = true;
    hostname = "amzebs-01.amz.at";
    domain = "amz.at";

    config = {
      # Listen only on localhost for security
      # Laravel will send via localhost, no external access needed
      inet_interfaces = "loopback-only";

      # Compatibility
      compatibility_level = "2";

      # Only accept mail from localhost
      mynetworks = "127.0.0.0/8 [::1]/128";

      # Larger message size limits for attachments
      mailbox_size_limit = "202400000"; # ~200MB
      message_size_limit = "51200000";  # ~50MB

      # Milter configuration is handled automatically by rspamd.postfix.enable
    };
  };
}