diff --git a/hosts/ami/default.nix b/hosts/ami/default.nix
index f9d2d39..08145d9 100644
--- a/hosts/ami/default.nix
+++ b/hosts/ami/default.nix
@@ -16,6 +16,7 @@
     ./disk-config.nix
     ./forgejo.nix
     ./murmur.nix
+    ./msmtp.nix
     ./website.nix
 
     ../../users/maintainer
diff --git a/hosts/ami/msmtp.nix b/hosts/ami/msmtp.nix
new file mode 100644
index 0000000..8a4d48a
--- /dev/null
+++ b/hosts/ami/msmtp.nix
@@ -0,0 +1,21 @@
+{config, ...}: {
+  age.secrets.msmtppassword = {
+    file = ../../secrets/msmtppassword.age;
+    mode = "770";
+    owner = "forgejo";
+    group = "forgejo";
+  };
+
+  programs.msmtp = {
+    enable = true;
+    accounts.default = {
+      host = "smtp.fastmail.com";
+      domain = "buffets.kitchen";
+      tls = true;
+      tls_starttls = false;
+      auth = "plain";
+      user = "mail@buffet.sh";
+      passwordeval = "cat ${config.age.secrets.msmtppassword.path}";
+    };
+  };
+}
diff --git a/secrets.nix b/secrets.nix
index b1a7eeb..a3fa0fd 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -3,4 +3,5 @@ let
 in {
   "secrets/bitwarden.age".publicKeys = [buffet];
   "secrets/borgpassword.age".publicKeys = [buffet];
+  "secrets/msmtppassword.age".publicKeys = [buffet];
 }
diff --git a/secrets/msmtppassword.age b/secrets/msmtppassword.age
new file mode 100644
index 0000000..26af347
--- /dev/null
+++ b/secrets/msmtppassword.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 zRvPWg jGsV1pjcJF/1DIYKxQuK8MVdtGb5j/AxUxPIgZkKPxo
+/kCfvNexkWL49MmZztpnt6FDOHqiVi7OVh5k4HDmhG0
+--- kHNbaMm2DRzSsCEPop4gXrKmBb/BSAG45xHeWyQfAkY
+ǿ8�*	v���x�H�q�[�z�&��z���jό��n,2��[�g�
\ No newline at end of file