diff --git a/config/services/idmail.nix b/config/services/idmail.nix
index 3218705..d97c80c 100644
--- a/config/services/idmail.nix
+++ b/config/services/idmail.nix
@@ -36,6 +36,8 @@ in
     idmail-user-hash_admin = mkArgon2id "idmail-user-pw_admin";
     idmail-mailbox-pw_catch-all = mkRandomSecret;
     idmail-mailbox-hash_catch-all = mkArgon2id "idmail-mailbox-pw_catch-all";
+    idmail-mailbox-pw_postmaster = mkRandomSecret;
+    idmail-mailbox-hash_postmaster = mkArgon2id "idmail-mailbox-pw_postmaster";
   };
 
   services.idmail = {
@@ -63,9 +65,15 @@ in
           public = false;
         };
       };
-      mailboxes."catch-all@${domain}" = {
-        password_hash = "%{file:${config.age.secrets.idmail-mailbox-hash_catch-all.path}}%";
-        owner = "admin";
+      mailboxes = {
+        "catch-all@${domain}" = {
+          password_hash = "%{file:${config.age.secrets.idmail-mailbox-hash_catch-all.path}}%";
+          owner = "admin";
+        };
+        "postmaster@${domain}" = {
+          password_hash = "%{file:${config.age.secrets.idmail-mailbox-hash_postmaster.path}}%";
+          owner = "admin";
+        };
       };
       # XXX: create mailboxes for git@ vaultwarden@ and simultaneously alias them to the catch all for a send only mail.
     };
diff --git a/hosts/mailnix/secrets/generated/idmail-mailbox-hash_postmaster.age b/hosts/mailnix/secrets/generated/idmail-mailbox-hash_postmaster.age
new file mode 100644
index 0000000..d775c83
--- /dev/null
+++ b/hosts/mailnix/secrets/generated/idmail-mailbox-hash_postmaster.age
@@ -0,0 +1,15 @@
+age-encryption.org/v1
+-> X25519 7aevFsnisTj16MQ8hrnMJqoVdO2GdqFa61VF5Qmhd3s
+JDDOotDICHFT5GDsWICL42WdRPvOIudHWFtKFR8X3gI
+-> piv-p256 ZFgiIw Auh3jBccqVLTB9T8SWR9QhzzorSR80yiqZiJnPp85IBm
+Pqz90kaTApoMhsu1K+O6pz6AlxwCYwNKFAudgwZTlyw
+-> piv-p256 XTQkUA AzRKffAsl84k42bDdToF8VBH7+udjxjR4fVk1QzhnRgT
+GC+YxTrur4HOW1ISAklzLAi0r96oeKmDi9m7PZHLyPY
+-> piv-p256 ZFgiIw Ajo2bYvV62xdgqdN6yNDR4wAxU8eDEnJabHMWFHpeIXC
+gdAzE5yyjjXhvnpKQ1bjBHrvHRtzpHWVTCuf3Ch0/4M
+-> piv-p256 5vmPtQ Ali5/tb0SlcXv5DlTkiXM1YZdwT70QthX4sPBsa8M4E/
+WkCVnNcEa8y0i0quAFVBFp6LHJlqfgZLrfaBBStmNIg
+-> ~s6Dx@-grease
+xpqWvkuk7DHascA6kA
+--- K9fl8KcOT03MwDzk3WQR+ydPyM0lZ9xs+WKH17mO5Ls
+;����*5�n�SI�)�T�2}�^1>��b���S�;�dˊj��X1ɬ��2K�q�*�ti����P��\��Z�g�`��tv�CTA�����
^,�ŝF�I5�5����a���V>�<#���Vz7�O.�z���
\ No newline at end of file
diff --git a/hosts/mailnix/secrets/generated/idmail-mailbox-pw_postmaster.age b/hosts/mailnix/secrets/generated/idmail-mailbox-pw_postmaster.age
new file mode 100644
index 0000000..202b432
--- /dev/null
+++ b/hosts/mailnix/secrets/generated/idmail-mailbox-pw_postmaster.age
@@ -0,0 +1,18 @@
+age-encryption.org/v1
+-> X25519 oVLzhepmXagwDGJUWwHmXEZlGFJvWteOUpqG7gpZ5gc
+cRAXzInCcjbfN/L0fyGZLkJtj3bubTVIpaVkm3D9OVQ
+-> piv-p256 ZFgiIw Aj+RnCjs5L7obYYMCLwhubhwpZ4BW2gOlD6aCq0jzcrw
+/8m8naEm6nmQt+RP3SRVnYlzuw7v/BQr5JPe/MYIy1c
+-> piv-p256 XTQkUA A2TMBzo6mb1xzAnYENiOkNP0jhEe5yZJ/hrA6EK5awGF
+qOuFgeuGUfChycgoqvNEulUUc6PWL5m2LUdFtXogTFg
+-> piv-p256 ZFgiIw AujM2On+RI50CxXcOMRBFDavXd6rzlXd+ttOWuo1+Xv+
+PrJihyDyBROiW1DHCLNIX7vHWZ868u4RycjYMRDYolw
+-> piv-p256 5vmPtQ A5ODZJZcFoY/wKWu+zkG2vdVWdcd3Xxh75bnX29Tb+WD
+qwiBddu8JJ9O0nMv/kZFNn/20mD9mU7lBHeLkfYgsW4
+-> n-grease cr|`xZ ;[qy]j zr)E>J T`&$=u-
+cOxU3bUSgmPe3bXW5La8vJi2tmXDbNj3vRLd8CWfzPXdbeMd6OqheJO91mZ4S4OP
+3vRQ0OcoSgJADpKl3ekYhoHcK6WKO5bUyRtSNF9UOOZubdDQfJBKxCPX0FITHw
+--- jRPZAVo7C0sNfvxJL1nlRAMTyX8eYwbQ/GZu2FLGrWE
+2�~-}��ݦ8��s����Я񋻍\�
+%��FB+L�����;/��-ʒ��Ȯ*�:��ά��vf�{��)����iP��6�
+H
\ No newline at end of file