update(forgejo): password recovery

nixos/forgejo.nix

@@ -1,4 +1,10 @@
-{
+{ config, ... }: {
+
+  age.secrets.forgejo_mailer_password = {
+    file = ../secrets/forgejo_mailer_password.age;
+    owner = "forgejo";
+  };
+
   services.forgejo = {
     enable = true;
     database.type = "postgres";
@@ -20,6 +26,15 @@
         ENABLED = true;
         DEFAULT_ACTIONS_URL = "github";
       };
+      mailer = {
+        ENABLED = true;
+        SMTP_ADDR = "smtp.gmail.com";
+        FROM = "filippoberto95@gmail.com";
+        USER = "filippoberto95@gmail.com";
+      };
+    };
+    secrets = {
+      mailer.PASSWD = config.age.secrets.forgejo_mailer_password.path;
     };
   };
 }

secrets/forgejo_mailer_password.age

@@ -0,0 +1,15 @@
+-----BEGIN AGE ENCRYPTED FILE-----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=
+-----END AGE ENCRYPTED FILE-----

secrets/secrets.nix

@@ -29,6 +29,7 @@ in
 {
   "garage_rpc_secret.age".publicKeys = devUsers ++ [ baldur heimdall odin sif thor ];
   # "oauth_proxy_client_credentials.age".publicKeys = devUsers ++ systems;
+  "forgejo_mailer_password.age".publicKeys = devUsers ++ [ heimdall ];
   "vaultwarden_env.age".publicKeys = devUsers ++ [ baldur ];
   "baldur_wg_priv.age".publicKeys = devUsers ++ systems;
   "kavita_token.age".publicKeys = devUsers ++ [ loki ];