{ myLib, ... }: {
  kubernetes.resources = {
    deployments.inbucket.spec = {
      selector.matchLabels.app = "inbucket";

      template = {
        metadata.labels.app = "inbucket";

        spec = {
          containers.inbucket = {
            image = "inbucket/inbucket:edge";

            ports = {
              web.containerPort = 9000;
              smtp.containerPort = 2500;
            };
          };
        };
      };
    };

    services = {
      web.spec = {
        selector.app = "inbucket";

        ports.web = {
          port = 80;
          targetPort = "web";
        };
      };

      email.spec = {
        type = "LoadBalancer";
        loadBalancerIP = myLib.globals.inbucketIPv4;
        selector.app = "inbucket";

        ports = [{
          port = 25;
          targetPort = "smtp";
        }];
      };
    };
  };

  lab.ingresses.inbucket = {
    host = "inbucket.kun.is";
    entrypoint = "localsecure";

    service = {
      name = "web";
      portName = "web";
    };
  };
}