diff --git a/applications/email.nix b/applications/email.nix
index 0789f4d..d7399b3 100644
--- a/applications/email.nix
+++ b/applications/email.nix
@@ -123,6 +123,20 @@
       };
     };
 
+    #https://nixos-mailserver.readthedocs.io/en/latest/add-roundcube.html
+    services.roundcube = {
+      enable = true;
+      # this is the url of the vhost, not necessarily the same as the fqdn of
+      # the mailserver
+      hostName = "${cfg.sub}.${cfg.domain}";
+      extraConfig = ''
+        # starttls needed for authentication, so the fqdn required to match
+        # the certificate
+        $config['smtp_server'] = "tls://${cfg.sub}.${cfg.domain}";
+        $config['smtp_user'] = "%u";
+        $config['smtp_pass'] = "%p";
+      '';
+    }
 #    systemd.services.dovecot2.serviceConfig = {
 #      # restart it daily, override default values
 #      Restart    = lib.mkForce "always";