fix mail notifications

hosts/ds9/backup.nix

@@ -26,6 +26,13 @@
       #upload_rate_limit = "4000";
       encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.borgmaticEncryptionKey.path}";
       compression = "auto,zstd,10";
+      extra_borg_options = {
+        init = "--lock-wait 600";
+        create = "--lock-wait 600";
+        prune = "--lock-wait 600";
+        compact = "--lock-wait 600";
+        check = "--lock-wait 600";
+      };
       ssh_command = "ssh -o ServerAliveInterval=10 -o ServerAliveCountMax=30 -o GlobalKnownHostsFile=${config.age.secrets.gatebridgeHostKeys.path} -i ${config.age.secrets.ds9OffsiteBackupSSH.path}";
       before_actions = [ "${pkgs.curl}/bin/curl -fss -m 10 --retry 5 -o /dev/null $(${pkgs.coreutils}/bin/cat ${config.age.secrets.ds9SyncoidHealthCheckUrl.path})/start" ];
       after_actions = [ "${pkgs.curl}/bin/curl -fss -m 10 --retry 5 -o /dev/null $(${pkgs.coreutils}/bin/cat ${config.age.secrets.ds9SyncoidHealthCheckUrl.path})" ];

hosts/ds9/default.nix

@@ -308,7 +308,7 @@ in
       tailscale.enable = true;
       tailscale.exitNode = true;
       tailscale.extraUpCommands = "--advertise-routes=10.0.0.0/16";
-      libvirt.enable = true;
+      # libvirt.enable = true;
       # paperless.enable = true;
     };
 

hosts/picard/plausible.nix

@@ -13,7 +13,39 @@ in {
   ];
   systemd.services.plausible.environment = {
     IP_GEOLOCATION_DB = "${pkgs.unstable.dbip-country-lite}/share/dbip/dbip-country-lite.mmdb";
+    DATABASE_URL = "postgresql:///plausible?host=/run/postgresql";
   };
+  systemd.services.plausible.script =
+  let cfg = config.services.plausible; in lib.mkForce ''
+                # Elixir does not start up if `RELEASE_COOKIE` is not set,
+            # even though we set `RELEASE_DISTRIBUTION=none` so the cookie should be unused.
+            # Thus, make a random one, which should then be ignored.
+            export RELEASE_COOKIE=$(tr -dc A-Za-z0-9 < /dev/urandom | head -c 20)
+            export ADMIN_USER_PWD="$(< $CREDENTIALS_DIRECTORY/ADMIN_USER_PWD )"
+            export SECRET_KEY_BASE="$(< $CREDENTIALS_DIRECTORY/SECRET_KEY_BASE )"
+
+            ${lib.optionalString (
+              cfg.mail.smtp.passwordFile != null
+            ) ''export SMTP_USER_PWD="$(< $CREDENTIALS_DIRECTORY/SMTP_USER_PWD )"''}
+
+            echo setup
+            ${lib.optionalString cfg.database.postgres.setup ''
+              # setup
+              ${cfg.package}/createdb.sh
+            ''}
+
+            echo migrate
+            ${cfg.package}/migrate.sh
+            export IP_GEOLOCATION_DB=${pkgs.dbip-country-lite}/share/dbip/dbip-country-lite.mmdb
+            # ${cfg.package}/bin/plausible eval "(Plausible.Release.prepare() ; Plausible.Auth.create_user(\"$ADMIN_USER_NAME\", \"$ADMIN_USER_EMAIL\", \"$ADMIN_USER_PWD\"))"
+            ${lib.optionalString cfg.adminUser.activate ''
+              psql -d plausible <<< "UPDATE users SET email_verified=true where email = '$ADMIN_USER_EMAIL';"
+            ''}
+
+            echo start
+            exec plausible start
+      
+    '';
   services.plausible = {
     enable = true;
     package = pkgs.unstable.plausible;
@@ -33,11 +65,11 @@ in {
       baseUrl = "https://${domain}";
       secretKeybaseFile = config.age.secrets.plausibleSecretKeybase.path;
     };
-    mail.email = "machdas@xyno.space";
+    mail.email = "plausible@hailsatan.eu";
     mail.smtp = {
-      user = "machdas@xyno.space";
+      user = "plausible@hailsatan.eu";
       passwordFile = config.age.secrets.smtpPassword.path;
-      hostAddr = "smtp.ionos.de";
+      hostAddr = "mail.hailsatan.eu";
       hostPort = 465;
       enableSSL = true;
     };

secrets/aliases.age

@@ -1,21 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 ugHWWw W+2DLIb8KW01l9vxoQFOXhnMnD2aG22Prcv/gk3pyyo
-H3ssyLdzglo8fQgd3PN+Eu7Z/iPqUHN+PItejw2f0U4
--> ssh-ed25519 UU9RSA iGKOj4CtgiQHdxkvzPQLoQD+WRBbqRsg/4Pxb6xqbAM
-0NP4BoKH0mBjsXqEf0GGWgxZpsKnEewqxO45SI5sQ1s
--> ssh-ed25519 RJI3BA sq0ol6OHx119ClrWbGFxcUEQXf0skwTRotWulB53JQA
-dAcO4uL3nr1581zAKrkT1wWNhx/5oRvQsT8QY84B94s
--> ssh-ed25519 XnvJKw HpxavGY/cD0u7aF3lXhq21O1Yih+FbkUs8C9DXHzpkQ
-NZRwIRf4UP/hVTZSGQ/TjNUzbqfFCsMjX3YZ+dU3i4E
--> ssh-ed25519 7NL5Ng 85mWdskx4tAtvYZM8x7gBZMc/lfR1H2829QSpSpbzHw
-bK4chg20Cxx2i/IYiNakMn6H6y7qauc9A/oaUGu+nh0
--> ssh-ed25519 5Sll2Q 2reUfLDLX0Chmgd732Ol3IIxietey8WiqkEF3/k2XmU
-ZeLsb1Qm2upGW1NhghwIQ6VZ3kZE6ka8ND95EtlGNSs
--> ssh-ed25519 IbXxfw tQFMkEMq+ecwqyiHMulp1shJdyNsBU2K4Ux/weKu93w
-f9DocqX5lrFkzR20aAU6W7okiJVo6S7LXCtk4WhIEDg
--> ssh-ed25519 WceKOQ 4pg9ejQTm2mmOcnX9DEeCqEhfYIh2xWDDZLIzR8a5jk
-TWlTqqoSj59mn0ijfX1JsxCYAyfmE4ySa4L9ZedU6ek
--> ssh-ed25519 6axOnA Rg1t3XvEuMIddSVA+dEbH6mV+kgTX3kkMQKDt1ExviE
-qcWPx/rtXD2xGlCSE/j0Tw3eQVkekJxL/W/bWH0+hDc
---- g/uypBu9pz/FoX4gQv1bLm5SlASFWSuBfXHFBjrsxUg
-¼aµy¶µ7ÁÝÀ¿,c|×ÆoÄUÜLÛŽOÞ
Œ¯žó×=êŒó)º# =èE»Á§­‡›)F^nK$X
+-> ssh-ed25519 ugHWWw sViCkRYadkFc6zo780jUvnKWsWTuS47/M5DyigdjL14
+UJrGe0Qd9eCQBNGenOKQATISEsWLaJ/nRmnHAzBIN3Y
+-> ssh-ed25519 UU9RSA NlXRBhoC9Zt2ZBbA0vwKKyeVsVcVix5Mpt8qTc4SwUs
+6XUr4zVnrYN5P8lys9FBZng/C+VP9lGABgl3jDFvw5g
+-> ssh-ed25519 RJI3BA 6+D4NSSkSkZvWLrpC6HWTtGok35si8NMmdJUf0GGbkw
+Y7wmeZrHI0GO/W2XxXKDjPjTCkXeu7ZHsL9seMZZmwY
+-> ssh-ed25519 XnvJKw cDrsL7/uUr0bujVJa0TyyyHZZ5zlbRNmlWYNDD/Spl8
+8YEV5e6x2A+13tb6VDUTFOoOqIkPe5fkYZPBHMDwRdQ
+-> ssh-ed25519 7NL5Ng Kwx4njQ9V8soKKjmOM2aaPac38Qgq+5/4CVZACBCaCc
+X6qlqAxvL6W9TJg+2cwB3MQaJOC9eQ8SL6sUHGZY/wA
+-> ssh-ed25519 5Sll2Q xmAz3iCTfTf0m0UsUy+l80vE3xn0/XSu2K0avRQN4DM
+2z9UE2iLItCwv4oblqiyT48V2mn+gjeJL9a+FoVjqR0
+-> ssh-ed25519 IbXxfw EnSe9zVpSrnCvYkqE3YDyU+AwgR63S25B96m1YwEYAI
+WbfjjBUKiWsjy99fJKG+XxxzrRzaZ6fLg32OKk/eO10
+-> ssh-ed25519 WceKOQ NkqEPG0dZbl5NT9RFVw5waiW4W7ptsLyEan26pmswAY
+uGzcAfiWuJMzj4m1bnWojP9Ya4C2bpdRodojRI3MfJk
+-> ssh-ed25519 6axOnA 8reXKFe4v1FV68oypKfT4RZ0J65F+BwnPhUp4dYZn1c
+jK7H28YD6o80jjhBxF3yjyp9U7MwVGrzaC8UMaRHTl8
+--- /+M/uw7R4EOYpXLWQuyMjfH9O3GNpvWDZr4K5ZTaE74
+…†ž.Þ狈Z aW‚Nòâó¶ÿJNw¬Â[È ™œpÙ£¸s2‚ F]Ä\

u[<5B>g”Œ'|@Óg„Ùœ7˜