simple-nixos-mailserver... One step deploy. Hasn't broken in years (it's never broken for me). Extremely stable. Can handle all your use cases. Declarative config, so no messy state.