diff --git a/nixos/forgejo.nix b/nixos/forgejo.nix index 0fa38c8..2c7f7b4 100644 --- a/nixos/forgejo.nix +++ b/nixos/forgejo.nix @@ -1,4 +1,10 @@ -{ +{ config, ... }: { + + age.secrets.forgejo_mailer_password = { + file = ../secrets/forgejo_mailer_password.age; + owner = "forgejo"; + }; + services.forgejo = { enable = true; database.type = "postgres"; @@ -20,6 +26,15 @@ ENABLED = true; DEFAULT_ACTIONS_URL = "github"; }; + mailer = { + ENABLED = true; + SMTP_ADDR = "smtp.gmail.com"; + FROM = "filippoberto95@gmail.com"; + USER = "filippoberto95@gmail.com"; + }; + }; + secrets = { + mailer.PASSWD = config.age.secrets.forgejo_mailer_password.path; }; }; } diff --git a/secrets/forgejo_mailer_password.age b/secrets/forgejo_mailer_password.age new file mode 100644 index 0000000..e9baa87 --- /dev/null +++ b/secrets/forgejo_mailer_password.age @@ -0,0 +1,15 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDRiZWhGQSBzbkVk +ZmJZend4S3E0RmNyWnhrMGJRRWJ6K2hlOEt3UWFiVitsQWx1a2p3Cm9hNlZiUlZI +Mnh0K2FBcjl1dXNzeFlUczhlSU9mRUlXL3U3Y3hkclQvaVUKLT4gc3NoLWVkMjU1 +MTkgZXZMbEl3IHhkZkFta1ArVW5uTVA2ZlY2dnlIVENpVWE1eHNjWHl5YjJQb1Bw +SFUxVlUKZW9GRjQyTkU2U1dveEpKYTVPMW14blZ6ZDZkdjV2dmhOUjV4SXFIRk55 +VQotPiBzc2gtZWQyNTUxOSB5aVlvWGcgY0JZdDZTRWFEYkp2d3Y0UlhTdXRFZ05l +MXhDUDJPQW0rYWRWeGR6cmFBOAp3US9naW51VFJZcFQrV21EWUM4ZDYxYWJEWlNw +RjROYUVha0p6bDNlM2tFCi0+ICpfLWdyZWFzZSAmezNcNl82IH1yZXVrKGwgI3BM +ICo7fWotZgpZTnF5NnZwYUdNWTJ4SGFBNFNObnVSNVJMaVNmeE9WRWFpNTFHVmxG +b2FOTjFrT2RRL1Vuamk3M05tVVRWM0xiClhCK3NBaDFnbmNuZ05TMHJaaElvaW5k +SWdUNEwrbjVsNjZoaVBJVnJCZE9Hc0swRDJGdW15L004NVFwMkUvN20KVEJnCi0t +LSA0em53WTNJcW83NS8vREVHbnVDSTFuM0x4dU9ma2ZDdFQya01kRXgvOVZVCp// +mptu9M0c2UwxeEoPKx0WeAg+eaHKzMLmns6EnKNrb1naeBKMqcHsA9/BBYyextk= +-----END AGE ENCRYPTED FILE----- diff --git a/secrets/secrets.nix b/secrets/secrets.nix index ddeeae8..41b4b1d 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -29,6 +29,7 @@ in { "garage_rpc_secret.age".publicKeys = devUsers ++ [ baldur heimdall odin sif thor ]; # "oauth_proxy_client_credentials.age".publicKeys = devUsers ++ systems; + "forgejo_mailer_password.age".publicKeys = devUsers ++ [ heimdall ]; "vaultwarden_env.age".publicKeys = devUsers ++ [ baldur ]; "baldur_wg_priv.age".publicKeys = devUsers ++ systems; "kavita_token.age".publicKeys = devUsers ++ [ loki ];