{ config, pkgs, lib, ... }:
{
  services.postfix = {
    enable = true;
    hostname = "wiki.noisebridge.net";
    origin = "noisebridge.net";
    relayHost = "m3";  # Tailscale hostname for existing Noisebridge mail server
    destination = [];   # Don't accept mail for local delivery
    networks = [ "127.0.0.0/8" "[::1]/128" ];
    config = {
      inet_interfaces = "loopback-only";
      smtp_tls_security_level = "may";
    };
  };
}