{ sec }:
let
  headers = [
    "From"
    "To"
    "Cc"
    "Date"
    "Subject"
    "Message-ID"
    "Organization"
    "MIME-Version"
    "Content-Type"
    "In-Reply-To"
    "References"
    "List-Id"
    "User-Agent"
    "Thread-Topic"
    "Thread-Index"
  ];
in
{
  rsa = {
    inherit headers;
    private-key = "%{file:${sec.stalwart-secret-rsa.path}}%";
    domain = "pyrox.dev";
    selector = "rsa-default";
    algorithm = "rsa-sha256";
    canonicalization = "relaxed/relaxed";
    expire = "10d";
    report = true;
  };
  ed25519 = {
    inherit headers;
    private-key = "%{file:${sec.stalwart-secret-ed25519.path}}%";
    domain = "pyrox.dev";
    selector = "default";
    algorithm = "ed25519-sha256";
    canonicalization = "relaxed/relaxed";
    expire = "10d";
    report = true;
  };
}