diff --git a/hosts/picard/default.nix b/hosts/picard/default.nix index 1d5a32fe..370790e1 100644 --- a/hosts/picard/default.nix +++ b/hosts/picard/default.nix @@ -132,11 +132,6 @@ ]; services.xynoblog.enable = true; programs.mosh.enable = true; - ragon.agenix.secrets."mailmoverConf" = { }; - services.mailmover = { - enable = true; - configFile = config.age.secrets.mailmoverConf.path; - }; ragon = { cli.enable = true; user.enable = true; diff --git a/hosts/picard/plausible.nix b/hosts/picard/plausible.nix index e4884417..9b7c285c 100644 --- a/hosts/picard/plausible.nix +++ b/hosts/picard/plausible.nix @@ -4,6 +4,7 @@ in { ragon.agenix.secrets."plausibleAdminPw" = { }; ragon.agenix.secrets."plausibleReleaseCookie" = { }; ragon.agenix.secrets."plausibleSecretKeybase" = { }; + ragon.agenix.secrets."smtpPassword.age" = { }; services.nginx.virtualHosts.${domain} = { forceSSL = true; enableACME = true; @@ -28,6 +29,14 @@ in { baseUrl = "https://${domain}"; secretKeybaseFile = config.age.secrets.plausibleSecretKeybase.path; }; + mail.email = "machdas@xyno.space"; + mail.smtp = { + user = "machdas@xyno.space"; + passwordFile = config.age.secrets.smtpPassword.path; + hostAddr = "smtp.ionos.de"; + hostPort = 465; + enableSSL = true; + }; }; ragon.persist.extraDirectories = [ "/var/lib/private/plausible" ]; diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 35a5012a..2a9b54fe 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -7,6 +7,7 @@ in "pulseLaunch.age".publicKeys = pubkeys.ragon.client; "rootPasswd.age".publicKeys = pubkeys.ragon.computers; "msmtprc.age".publicKeys = pubkeys.ragon.computers; + "smtpPassword.age".publicKeys = pubkeys.ragon.computers; "aliases.age".publicKeys = pubkeys.ragon.computers; "wpa_supplicant.age".publicKeys = pubkeys.ragon.computers; "ragonPasswd.age".publicKeys = pubkeys.ragon.computers; diff --git a/secrets/smtpPassword.age b/secrets/smtpPassword.age new file mode 100644 index 00000000..0a20daad --- /dev/null +++ b/secrets/smtpPassword.age @@ -0,0 +1,26 @@ +age-encryption.org/v1 +-> ssh-ed25519 ugHWWw FtcGNXmh7PwK4bO5N+eT9vBR9GtwKaKExxifNJX6Mik +mHs3JlVevWcsSfhnxv3rhTrPZSec+Pucd8/74850Xkg +-> ssh-ed25519 UU9RSA XNqRcpCif9mHXXLNI2DRvBkzXtrgPjOMritdLulaKFI +hwSLA7wowexUX8gyt/d9ulTBLHVOhOiJi+IteT3W24I +-> ssh-ed25519 RJI3BA 0B0d7AyOfp0XUijZbYr5MDUpskj7+WMs00OLttXXRF4 +53NpvgvPBDenENPvdW1TAgOdrELZOfiX6kO17+QwTco +-> ssh-ed25519 XnvJKw aFSEEC6hTzfsRrO9SpaN5LBEnnPDTBT1jRR/rkCT4Cc +JQlbTyx4gbEcQdg49CQscwYzRepB3yzsw/kBudPh1bQ +-> ssh-ed25519 7NL5Ng Ww5tqazbDcUycbzcD8l5IHAe3JqmNYiRBtds0Vsqp20 +4AqLpe+cMGJPXlOBga896NF1YH3NKF2WgjejCmpyzuI +-> ssh-ed25519 ILWjJw KdkSoqn72OZ1Q4tRnw291qR4xCRzahvO1RJweqRdVzo +gRerKCLLOGFUROm1UWzdZ7VwuQsVbWDVQM4oxQBWVUQ +-> ssh-ed25519 R/VstQ zeQaN3zvyRxXsPEUuT9AtEtdwXFg9mMCrp2DO2V4SyA +R1ezs5RTKVutC3/9h0WKLZkZuZ8LOh4nYvDy72W0D24 +-> ssh-ed25519 IbXxfw lyaTtCgP0uA3PEjvKNSysuXQrqx+pkA8PL+Rpb2iwyg +5rmicY5e5yPKeOeIY5mHqFnZT4Wzcq53suiMy6a/4+M +-> ssh-ed25519 46dvqg KhmXEi9rmvvWT+RM2sdEwwi8kABd1uXyVsOsA17laWA +mekzc+0hirIzHwcfV3cm2EHpbHWMrb1kVpbhc5x4yMs +-> ssh-ed25519 WceKOQ /7Jseqr6RXgPzk3+HVxYj+gt1jfZ5AOo8JbTiQ/+QkM +Si6ToRfIjCEnSGMBrkPGFptdp4C/q8JUZpqXAqkonzw +-> v>-grease }e Ct<+ riquL +7p8gHBSMXfz19uJQ7x5JPJbJxO/FB0wOGYmGlFB+oFm9kB6jNL/X0LwZAbye5z3m +f94fwthSxUO9qzdZae8+elZJkgiXZkSVid0oZoYLeajFkX3VS8ZCCt4 +--- SnV7JWc6dVPJ7eg0JS+C0yGOInovLl8uJ+nO3TEtaN4 +è£Ef%`/Á:õ9„H©Ñj3({ƨ4ÃOW,¹y)×&Bzu®Fá3Å/Ú³Ù0qÛ´tý;?¾=VçkÙ +Ó %ñq‘ \ No newline at end of file