{ lib, pkgs, ... }:

{
  users.users.patch-refs = {
    description = "spectrum-devel patch monitor";
    group = "spectrum";
    isSystemUser = true;
  };

  services.postfix.virtual = ''
    patch-refs@spectrum-os.org patch-refs@spectrum-os.org
  '';

  services.postfix.transport = ''
    patch-refs@spectrum-os.org patch-refs:
  '';

  services.postfix.masterConfig.patch-refs = {
    type = "unix";
    command = "pipe";
    privileged = true;
    args = [
      "flags=X"
      "user=patch-refs"
      "argv=${with pkgs; toString [
        "${execline}/bin/export" "PATH"
        (lib.makeBinPath [
          b4 coreutils findutils gitMinimal strace

          (mblaze.overrideAttrs ({ patches ? [], ... }: {
            patches = patches ++ [
              (fetchpatch {
                url = "https://inbox.vuxu.org/mblaze/20220523170921.2623516-1-hi@alyssa.is/raw";
                sha256 = "1fwnr6277fjdrv0lvjrzyxjd1p94c6jg2nl6cd4lh9aizmfbjiq0";
              })
            ];
          }))
        ])
        "${execline}/bin/execlineb"
        "-S1"
        (copyPathToStore ./mda.elb)
        "$client_address"
      ]}"
    ];
  };
}