# fetches mails for me
{ lib, pkgs, config, ... }:
let
  filters = [
    {
      query = "from:linkedin.com";
      tags = [ "+linked" "+jobs" ];
    }
    {
      query = "from:computerfutures.com OR from:computerfutures.de";
      tags = [ "+jobs" "-inbox" ];
    }
    {
      query = "from:seek.com.au or from:seek.co.nz";
      tags = [ "+jobs" ];
    }
    {
      query = "from:xing.com";
      tags = [ "+jobs" "-inbox" ];
    }
    {
      query = "from:no-reply@backtrace.io";
      tags = [ "+sononym" "-inbox" "-unread" ];
    }
    {
      query = "from:ebay.com OR from:ebay.de OR from:ebay.net";
      tags = [ "+ebay" "+shop" "+billing" ];
    }
    {
      query = "from:bahn.de";
      tags = [ "+billing" "+bahn" ];
    }
    {
      query =
        "from:fysitech.atlassian.net OR to:engiadina-pwa@noreply.github.com";
      tags = [ "+mia" "+work" "-unread" "-inbox" ];
    }
    {
      query = "from:turners.co.nz";
      tags = [ "+junk" "-unread" "-inbox" ];
    }
    {
      query = "from:twitch.tv";
      tags = [ "+junk" "-unread" "-inbox" ];
    }
    {
      query = "from:space-left.org";
      tags = [ "+space-left" ];
    }
    {
      query = "from:landr.com";
      tags = [ "+landr" "+music" ];
    }
    {
      query = "tag:landr and tag:billing";
      tags = [ "+billing" ];
    }
    {
      query = "from:codepen.io";
      tags = [ "+junk" "-unread" "-inbox" ];
    }
    {
      query = "from:mailings.web.de";
      tags = [ "+junk" "-unread" "-inbox" ];
    }
    {
      query =
        "from:circleci.com OR (from:noreply@github.com AND to:audio-overlay@googlegroups.com)";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:getdigital.de";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:digitalo.de";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:puppet.com";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:mixcloudmail.com AND subject:Weekly Update";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:facebook.com OR from:facebookmail.com";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:getpocket.com";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:oknotify2.com";
      tags = [ "+okcupid" ];
    }
    {
      query = "from:oknotify2.com AND NOT subject:New message";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:paulaschoice.com";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query =
        "from:samplemagic.com OR from:wavealchemy.co.uk OR from:creators.gumroad.com";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:immobilienscout24.de";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:magix.net";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:booking.com";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:hackster.io";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:trade4less.de";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:taxback.de OR to:taxback.de";
      tags = [ "+steuer" ];
    }
    {
      query = "from:campact.de";
      tags = [ "+campact" "+politics" ];
    }
    {
      query = "from:menospese.com";
      tags = [ "+junk" "-unread" "-inbox" ];
    }
    {
      query = "from:aliexpress.com";
      tags = [ "+shop" "+aliexpress" ];
    }
    {
      query = "from:congstar.de";
      tags = [ "+billing" "+congstar" "-inbox" "-unread" ];
    }
    {
      query = "from:congstarnews.de";
      tags = [ "+congstar" "-inbox" "-unread" "+junk" ];
    }
    {
      query = "from:fitnessfirst.de";
      tags = [ "-inbox" "-unread" "+junk" ];
    }
    {
      query =
        "from:steampowered.com AND NOT ( subject:purchase OR subject:received )";
      tags = [ "-inbox" "-unread" ];
    }
    {
      query =
        "from:steampowered.com AND ( subject:purchase OR subject:received )";
      tags = [ "+billing" "+steam" ];
    }
    {
      query = "from:gog.com AND NOT subject:Bestellung";
      tags = [ "-inbox" "-unread" ];
    }
    {
      query = "from:gog.com AND subject:Bestellung";
      tags = [ "+billing" "+gog" ];
    }
    {
      query = "from:drive-now.com";
      tags = [ "+billing" "+drivenow" "-inbox" "-unread" ];
    }
    {
      query = "from:tinc-vpn.org";
      tags = [ "+tinc" ];
    }
    {
      query = "from:mindfactory.de";
      tags = [ "+shop" "+billing" ];
    }
    {
      query = "from:zalando.de";
      tags = [ "+shop" "+billing" "+zalando" ];
    }
    {
      query = "from:ing.de";
      tags = [ "+bank" "+ingdiba" ];
    }
    {
      query = "from:nab.com.au";
      tags = [ "+bank" "+nab" "-inbox" "-unread" ];
    }
    {
      query = "from:dkb.de";
      tags = [ "+bank" "+dkb" ];
    }
    {
      query = "from:o2online.de";
      tags = [ "+billing" "+o2" ];
    }
    {
      query = "from:betfair.com";
      tags = [ "+work" "+betfair" ];
    }
    {
      query = "from:ghostinspector.com";
      tags = [ "-unread" "-inbox" "+junk" ];
    }
    {
      query = "from:notifications@github.com";
      tags = [ "+github" ];
    }
    {
      query = "from:travis-ci.org AND subject:mrVanDalo/navi";
      tags = [ "+development" "+navi" ];
    }
    {
      query = "from:travis-ci.org AND subject:nur-packages";
      tags = [ "+development" "+nixos" "+nur-packages" ];
    }
    {
      query = "from:travis-ci.org AND subject:csv-to-qif";
      tags = [ "+development" "+csv-to-qif" ];
    }
    {
      query = "to:proaudio@lists.tuxfamily.org";
      tags = [ "-inbox" "-unread" ];
    }
    {
      query = "from:nixos1@discoursemail.com";
      tags = [ "+nixos" "+discourse" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Development";
      tags = [ "+nixos" "+discourse" "+development" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Français";
      tags = [ "+nixos" "+discourse" "-inbox" "-unread" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Announcements";
      tags = [ "+nixos" "+discourse" "+announcements" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Links";
      tags = [ "+nixos" "+discourse" "+links" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Games";
      tags = [ "+nixos" "+discourse" "+games" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Meta";
      tags = [ "+nixos" "+discourse" "+meta" ];
    }
    {
      query = "from:nixos1@discoursemail.com AND subject:Events";
      tags = [ "+nixos" "+discourse" "+events" ];
    }
    {
      query = "from:limebike.com AND (subject:Funds OR subject:Receipt)";
      tags = [ "-inbox" "-unread" "+billing" "+limebike" ];
    }
    {
      query = "from:freemusicarchive.org";
      tags = [ "+FMA" ];
    }
    {
      query = "from:namecheap.com and subject:auto-renewal";
      tags = [ "+namecheap" "+billing" ];
    }
    {
      query = "from:namecheap.com and subject:order";
      tags = [ "+namecheap" "+billing" ];
    }
    {
      query = "tag:namecheap.com and tag:billing and body:gaykraft.com";
      tags = [ "+namecheap" "+billing" ];
    }
    {
      query = "from:nintendo.com";
      tags = [ "+nintendo" "+billing" ];
    }
    {
      query = "from:oculus.com AND subject:receipt";
      tags = [ "+oculus" "+billing" ];
    }
    {
      query = "from:vstbuzz.com";
      tags = [ "+junk" "-inbox" ];
    }
    {
      query = "from:runtastic.com";
      tags = [ "+junk" "-inbox" ];
    }
    {
      query = "from:letterboxd.com";
      tags = [ "+junk" "-inbox" ];
    }
    {
      query = "from::microsoftstoreemail.com";
      tags = [ "+junk" "-inbox" ];
    }
    {
      query = "from:car2go.com";
      tags = [ "-inbox" "-unread" ];
    }
    {
      query = "from:sixt.de";
      tags = [ "-inbox" "-unread" ];
    }
    {
      query = "from:meetup.com";
      tags = [ "-inbox" "-unread" "+meetup" ];
    }
    {
      query = "from:slack.com";
      tags = [ "+slack" ];
    }
    {
      query = "from:keybase.io";
      tags = [ "+keybase" ];
    }
    {
      query = "from:tumblr.com";
      tags = [ "+junk" "-inbox" "-unread" ];
    }
    {
      query = "from:jobs2web.com";
      tags = [ "+newzealand" "+jobs" "-inbox" ];
    }
    {
      query = "from:mailings.gmx.net";
      tags = [ "+junk" "-inbox" "-unread" ];
    }
    {
      query = "from:paypal.de AND subject:Bestätigung";
      tags = [ "-unread" "+paypal" "+billing" ];
    }
    {
      query = "to:c-base.org";
      tags = [ "+cbase" ];
    }
    {
      query = "to:c-base.org AND subject=[auto-report]";
      tags = [ "-unread" "-inbox" ];
    }
    {
      query = "from:browserstack.com";
      tags = [ "+browserstack" ];
    }
    {
      query =
        "to:renoise@ingolf-wagner.de OR to:root@renoise.com OR from:renoise.com OR to:admin@renoise.com";
      tags = [ "+renoise" ];
    }
    {
      query = "from:amazon.de OR from:amazon.com AND NOT to:renoise.com";
      tags = [ "+shop" "+amazon" "+billing" ];
    }
    {
      query = "from:hetzner.com OR from:hetzner.de";
      tags = [ "+hetzner" ];
    }
    {
      query =
        "to:renoise.com AND NOT ( from:renoise.com OR from:root OR from:hetzner.com OR from:hetzner.de OR from:amazon.com OR from:gmail.com )";
      tags = [ "-inbox" "-unread" "+junk" "+renoise" ];
    }
    {
      query = "tag:hetzner and subject:Invoice";
      tags = [ "+billing" ];
    }
    # final rules to make imap sync stuff easier
    # there can only be one output folder tag, and theses rules are prioritized
    {
      query = "tag:fraud";
      tags = [ "-inbox" "-archive" "-junk" "-unread" ];
      message = "clean up tag fraud";
    }
    {
      query = "tag:junk";
      tags = [ "-inbox" "-archive" "-fraud" "-unread" ];
      message = "clean up tag junk";
    }
    {
      query = "tag:archive";
      tags = [ "-inbox" "-junk" "-fraud" "-unread" ];
      message = "clean up tag archive";
    }
    {
      query = "tag:inbox";
      tags = [ "-archive" "-junk" "-fraud" ];
      message = "clean up inbox";
    }
    {
      query = "tag:killed";
      tags = [ "-inbox" "-unread" ];
      message = "clean up tag killed";
    }
    {
      query = "tag:muted";
      tags = [ "-inbox" "-unread" ];
    }
    # remove new tag at the end
    {
      query = "tag:new";
      tags = [ "-new" ];
      message = "remove new tag at the end";
    }

  ];

  notmuchTagging = let
    template = index:
      { tags, query, message ? "generic", ... }:
      let
        command = ''
          ${pkgs.notmuch}/bin/notmuch tag ${
            lib.concatStringsSep " " tags
          } -- "${query}"
        '';
      in ''
        echo '${command}'
        ${command}
      '';
  in pkgs.writers.writeBash "notmuch-tagging"
  (lib.concatStringsSep "\n" (lib.imap0 template filters));

  notmuchTaggingNew = let
    template = index:
      { tags, query, message ? "generic", ... }:
      let
        command = ''
          ${pkgs.notmuch}/bin/notmuch tag ${
            lib.concatStringsSep " " tags
          } -- "${query} AND tag:new"
        '';
      in ''
        echo '${command}'
        ${command}
      '';
  in pkgs.writers.writeBash "notmuch-tagging-new"
  (lib.concatStringsSep "\n" (lib.imap0 template filters));

in {

  backup.dirs = [ "/home/mailfetcher" ];

  users.users.mailUser = {
    isNormalUser = true;
    description = "collects mails for me";
    hashedPassword = "!";
    name = "mailfetcher";
    home = "/home/mailfetcher";
    openssh.authorizedKeys.keyFiles =
      config.users.users.root.openssh.authorizedKeys.keyFiles;
  };

  # configure passwords
  krops.userKeys = {
    "gmail.palipalo9" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/gmail/palipalo9>;
      requiredBy = [ "fetchmail.service" ];
    };
    "gmx.palo_van_dalo" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/gmx/palo_van_dalo>;
      requiredBy = [ "fetchmail.service" ];
    };
    "gmx.ingolf_wagner" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/gmx/ingolf.wagner>;
      requiredBy = [ "fetchmail.service" ];
    };
    "web.pali_palo" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/web.de/pali_palo>;
      requiredBy = [ "fetchmail.service" ];
    };
    "siteground.contact" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/siteground/contact>;
      requiredBy = [ "fetchmail.service" ];
    };
    "gaykraft.root" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/gaykraft/root>;
      requiredBy = [ "fetchmail.service" ];
    };
    "c-base.palo" = {
      user = config.users.users.mailUser.name;
      source = toString <secrets/mail/c-base/palo>;
      requiredBy = [ "fetchmail.service" ];
    };
  };

  environment.systemPackages = [ pkgs.muchsync ];

  # configure accounts
  home-manager.users.mailUser.accounts.email = {
    accounts = {
      palo_van_dalo-gmx = {
        primary = false;
        address = "palo_van_dalo@gmx.de";
        aliases = [ ];
        realName = "Ingolf Wagner";
        userName = "palo_van_dalo@gmx.de";
        passwordCommand =
          "cat ${toString config.krops.userKeys."gmx.palo_van_dalo".target}";
        imap = {
          host = "imap.gmx.net";
          port = 993;
        };
        mbsync = {
          enable = true;
          create = "both";
        };
        notmuch.enable = true;
      };
      ingolf-wagner-gmx = {
        primary = false;
        address = "ingolf.wagner@gmx.de";
        aliases = [ ];
        realName = "Ingolf Wagner";
        userName = "ingolf.wagner@gmx.de";
        passwordCommand =
          "cat ${toString config.krops.userKeys."gmx.ingolf_wagner".target}";

        imap = {
          host = "imap.gmx.net";
          port = 993;
        };
        mbsync = {
          enable = true;
          create = "both";
        };
        notmuch.enable = true;
      };
      pali_palo = {
        primary = false;
        address = "pali_palo@web.de";
        aliases = [ ];
        realName = "Ingolf Wagner";
        userName = "pali_palo@web.de";
        passwordCommand =
          "cat ${toString config.krops.userKeys."web.pali_palo".target}";
        imap = {
          host = "imap.web.de";
          port = 993;
        };
        mbsync = {
          enable = true;
          create = "both";
        };
        notmuch.enable = true;
      };
      c-base = {
        primary = false;
        address = "palo@c-base.org";
        aliases = [ ];
        realName = "Ingolf Wagner";
        userName = "palo";
        passwordCommand =
          "cat ${toString config.krops.userKeys."c-base.palo".target}";
        imap = {
          host = "c-mail.c-base.org";
          port = 993;
          # fetched using :  nix-shell -p openssl --run "openssl s_client -connect c-mail.c-base.org:993 -showcerts"
          tls.certificatesFile = pkgs.writeText "c-base.pem" ''
            -----BEGIN CERTIFICATE-----
            MIIFKDCCAxCgAwIBAgIDAtwrMA0GCSqGSIb3DQEBDQUAMFQxFDASBgNVBAoTC0NB
            Y2VydCBJbmMuMR4wHAYDVQQLExVodHRwOi8vd3d3LkNBY2VydC5vcmcxHDAaBgNV
            BAMTE0NBY2VydCBDbGFzcyAzIFJvb3QwHhcNMTkxMTA5MDgzMjUyWhcNMjExMTA4
            MDgzMjUyWjBhMQswCQYDVQQGEwJERTEPMA0GA1UECBMGQmVybGluMQ8wDQYDVQQH
            EwZCZXJsaW4xFDASBgNVBAoTC2MtYmFzZSBlLlYuMRowGAYDVQQDExFjLW1haWwu
            Yy1iYXNlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKR3XBxJ
            72MayCS0D5GCoHcY0TQLs1DQSohCCobRdSowFJzNQw/2lL6bb+Q2rmevZQXuM4vP
            YbFytvTDmY5y5MNXEqGLfi8D5TcaP/RdXWQU++yUunE6yMdqZNheeXPjM//PnoXG
            DyT236BovEi3YipUUsLXFiRj+cAjrQE7a2YUs3fjV3P6grMH0V06J6P6+JJvRgp2
            K33uhKhnKyb3s1tbdbu1KeGozx2ws9lg79XV+Py6PXxP6jTZ2PCsaxs3BThSdmsl
            vQyk/zoW7tA1m2ntRCoyFHZqfOHsN3UOS/HDRlXqgSf0ah8cPYPsl0ayXhgOv0Tu
            1PSMt4Ve2GajX8MCAwEAAaOB9TCB8jAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQE
            AwIDqDA0BgNVHSUELTArBggrBgEFBQcDAgYIKwYBBQUHAwEGCWCGSAGG+EIEAQYK
            KwYBBAGCNwoDAzAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAGGF2h0dHA6Ly9v
            Y3NwLmNhY2VydC5vcmcvMDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuY2Fj
            ZXJ0Lm9yZy9jbGFzczMtcmV2b2tlLmNybDAtBgNVHREEJjAkghFjLW1haWwuYy1i
            YXNlLm9yZ4IPbWFpbC5jLWJhc2Uub3JnMA0GCSqGSIb3DQEBDQUAA4ICAQBjTIa1
            xdhUYXJidv1U0qaqSV1DzumakFY20OM4QCV0Qvlq+SQUqroGBTIGodxhTnjG5o01
            4xBAnsTcMRNycXHu0j6XYqDS4QhaFcGdFmXP0EQfAFbvhwZdbvgiRHuUTSGEbcLp
            Vk8sP8dpzx+zMAZ6PL7XMwPFPTHm7vw40qmTyCuUcnhIwHgwGxu4yu0tdsU+VwRD
            RVsdZO4V2GhFTz8oRcHvmC2wmx+Zwx0RXWPXSN5yRDDZWwY4WbECa2MvojH1HlJG
            YJkokq7nbYJix/RipSkAXgurcgppVmM5cf7uYgSrltW8pm3IMMPrlaFrlzMMMtdq
            SYFk+FDp296B7CDyWpQhDcVjnGQ70JfMWT5S3Lsi8DnI2pul9ljxPOt+Q8XFh1oz
            Ofr7y5Qjm72YToOX1j7N8ppCh0RJH4lOsouTPVdp859ch9FxZdceq+nC744wv+Nt
            TQPw15Gk3RY5mVYBE/Cw2T7j7qDmBaEUKxkfW7q8t287FXM4XX6C+cKYr6jYx6s1
            5/2p4gCuOALYqJ7kD2xjci0VTWu77H4J2QKEZF8AgdI36dIYr7GY0e/+xb/CScwr
            uvu2R9jfPOMVu6CiavPGUtcvju4A+qMUDqIyH9dNwkMQRffAtmsF6KR4nMYxhr45
            nKY1BaufWLD1UWrjaR1IF6L5qDHOXeMJEChYkg==
            -----END CERTIFICATE-----'';
        };
        mbsync = {
          enable = true;
          create = "both";
        };
        notmuch.enable = true;
      };
      gmail = {
        # for google accounts you have to allow 'less secure apps' in accounts.google.com
        primary = true;
        address = "palipalo9@googlemail.com";
        aliases = [ ];
        realName = "Ingolf Wagner";
        userName = "palipalo9@googlemail.com";
        passwordCommand =
          "cat ${toString config.krops.userKeys."gmail.palipalo9".target}";
        imap = {
          host = "imap.gmail.com";
          port = 993;
        };
        mbsync = {
          enable = true;
          create = "both";
        };
        notmuch.enable = true;
      };
      ingolf-wagner-de = {
        primary = false;
        address = "contact@ingolf-wagner.de";
        aliases = [ ];
        realName = "Ingolf Wagner";
        userName = "contact@ingolf-wagner.de";
        passwordCommand =
          "cat ${toString config.krops.userKeys."siteground.contact".target}";
        imap = {
          host = "securees5.sgcpanel.com";
          port = 993;
          tls.useStartTls = true;
        };
        # make sure the upstream mail is deleted
        getmail = {
          enable = true;
          delete = true;
          readAll = false;
          mailboxes = [ "ALL" ];
        };
        notmuch.enable = true;
      };
    };
  };

  # configure mbsync
  home-manager.users.mailUser.programs.mbsync.enable = true;

  # re-tag everything once a day
  systemd.services.retagmail = {
    enable = true;
    serviceConfig = { User = config.users.users.mailUser.name; };
    environment.NOTMUCH_CONFIG =
      "${config.users.users.mailUser.home}/.config/notmuch/notmuchrc";
    script = "${notmuchTagging}";
  };
  systemd.timers.retagmail = {
    enable = true;
    timerConfig = {
      OnCalendar = "daily";
      Persistent = "true";
    };
    wantedBy = [ "multi-user.target" ];
  };

  # fetch mails every 10 minutes
  systemd.services.fetchmail = {
    enable = true;
    serviceConfig = { User = config.users.users.mailUser.name; };
    environment.NOTMUCH_CONFIG =
      "${config.users.users.mailUser.home}/.config/notmuch/notmuchrc";
    script = ''
      echo "run mbsync"
      ${pkgs.isync}/bin/mbsync \
        --all

      echo "run getmail"
      ${pkgs.getmail}/bin/getmail \
        --quiet \
        --rcfile getmailingolf-wagner-de

      echo "run notmuch"
      ${pkgs.notmuch}/bin/notmuch new
      ${notmuchTaggingNew}
      echo "mute threads"
      ${pkgs.notmuch}/bin/notmuch tag +muted $(${pkgs.notmuch}/bin/notmuch search --output=threads tag:muted)
    '';
  };
  systemd.timers.fetchmail = {
    enable = true;
    # timerConfig.OnCalendar = " *-*-* *:00:00";
    timerConfig.OnCalendar = "*:0/10";
    wantedBy = [ "multi-user.target" ];
  };

  # configure notmuch
  home-manager.users.mailUser.programs.notmuch = {
    enable = true;
    new.tags = [ "unread" "inbox" "new" ];
  };
  home-manager.users.mailUser.home.file."notmuch" = {
    source = "${config.users.users.mailUser.home}/.config/notmuch/notmuchrc";
    target = ".notmuch-config";
  };

}