{ myLib, ... }: {
  kubernetes.resources = {
    serviceAccounts.inbucket = { };

    deployments.inbucket.spec = {
      selector.matchLabels.app = "inbucket";

      template = {
        metadata.labels.app = "inbucket";

        spec = {
          serviceAccountName = "inbucket";

          containers = {
            inbucket = {
              image = "inbucket/inbucket:edge";

              ports = {
                web.containerPort = 9000;
                smtp.containerPort = 2500;
              };
            };
          };
        };
      };
    };

    services = {
      inbucket.spec = {
        type = "LoadBalancer";
        loadBalancerIP = myLib.globals.inbucketIPv4;
        selector.app = "inbucket";

        ports = {
          smtp = {
            port = 25;
            targetPort = "smtp";
          };

          web = {
            port = 80;
            targetPort = "web";
          };
        };
      };
    };
  };

  lab.tailscaleIngresses.tailscale = {
    host = "inbucket";
    service.name = "inbucket";
  };
}