diff --git a/hosts/cube/nextcloud/default.nix b/hosts/cube/nextcloud/default.nix
index 7a3aeda..ab14cbd 100644
--- a/hosts/cube/nextcloud/default.nix
+++ b/hosts/cube/nextcloud/default.nix
@@ -6,6 +6,7 @@ let
   fqdn = "cloud.${domain}";
 in serverSystemConfiguration {
   age.secrets."cube/password.nextcloud".owner      = "nextcloud";
+  age.secrets."cube/password.mail.nextcloud".owner = "nextcloud";
 
   services.postgresql = {
     ensureDatabases = [ "nextcloud" ];
@@ -51,11 +52,22 @@ in serverSystemConfiguration {
     extraOptions = {
       default_phone_region = "TR";
 
-      mail_smtphost     = "::";
-      mail_smtpmode     = "sendmail";
+      mail_sendmailmode = "smtp";
+      mail_smtpmode     = "smtp";
+
+      mail_smtpauth   = 1;
+      mail_smtphost   = config.mailserver.fqdn;
+      mail_smtpport   = "465";
+      mail_smtpsecure = "ssl";
+
+      mail_domain       = domain;
       mail_from_address = "cloud";
+      mail_smtpname     = "cloud@${domain}";
     };
 
+    # { "mail_smtppassword": "..." }
+    secretFile = config.age.secrets."cube/password.mail.nextcloud".path;
+
     phpOptions = {
       "opcache.interned_strings_buffer" = "16";
       output_buffering                  = "off";
diff --git a/secrets/cube/password.mail.nextcloud.age b/secrets/cube/password.mail.nextcloud.age
new file mode 100644
index 0000000..21ec1b8
--- /dev/null
+++ b/secrets/cube/password.mail.nextcloud.age
@@ -0,0 +1,15 @@
+age-encryption.org/v1
+-> ssh-ed25519 +rZ0Tw CX4GDRE5ufJeZ6/z+rR1OI948oXfmwqvXYdNWKZ8DFA
+sTJLWk9pxlLPXAgYK3NzwjNTXGjcy3W2q722BZNlHig
+-> ssh-rsa jPaU3Q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+--- dkfT+Q5Cujh1cRa6+5wW/3CSl68j6p7j5wkEhfwCOQo
+¬i›õÊÖߢ˜MCeO"Î|ƒ'¬nËí¡ëþWÜÒB^ ’~}¶ÍÙ.•‘Wx]òåÙ7<D5ÂbÕku®Vãz=´0P>*
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 80dddd1..838b7d4 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -19,7 +19,8 @@ in {
   "cube/password.grafana.age".publicKeys      = server keys.cube;
   "cube/password.mail.grafana.age".publicKeys = server keys.cube;
 
-  "cube/password.nextcloud.age".publicKeys = server keys.cube;
+  "cube/password.nextcloud.age".publicKeys      = server keys.cube;
+  "cube/password.mail.nextcloud.age".publicKeys = server keys.cube;
 
   "enka/password.hash.orhan.age".publicKeys = normal keys.rgbcube;
   "enka/password.hash.said.age".publicKeys  = normal keys.rgbcube;