{ myLib, ... }: {
  kubernetes.resources = {
    serviceAccounts.inbucket = { };

    deployments.inbucket.spec = {
      selector.matchLabels.app = "inbucket";

      template = {
        metadata.labels.app = "inbucket";

        spec = {
          serviceAccountName = "inbucket";

          containers = {
            inbucket = {
              image = myLib.globals.images.inbucket;

              ports = {
                web.containerPort = 9000;
                smtp.containerPort = 2500;
              };
            };
          };
        };
      };
    };

    services = {
      inbucket.spec = {
        type = "LoadBalancer";
        loadBalancerIP = myLib.globals.inbucketIPv4;
        selector.app = "inbucket";

        ports = {
          smtp = {
            port = 25;
            targetPort = "smtp";
          };

          web = {
            port = 80;
            targetPort = "web";
          };
        };
      };
    };
  };

  lab = {
    tailscaleIngresses.tailscale = {
      host = "inbucket";
      service.name = "inbucket";
    };

    ingresses.inbucket = {
      host = "inbucket.kun.is";
      entrypoint = "localsecure";

      service = {
        name = "inbucket";
        portName = "web";
      };
    };
  };
}