add mail server secrets

diff --git a/lemmy/default.nix b/lemmy/default.nix
index c89e030bbe292d62fcd79acd9d17df9800389e0b..85ae4ca9d3bf3b0736a4168bd157d1239e43cd76 100644 (file)
--- a/lemmy/default.nix
+++ b/lemmy/default.nix
@@ -21,12 +21,24 @@
   };
 
   sops.secrets."lemmy/initial_admin_password" = { };
+  sops.secrets."lemmy/smtp_server" = { };
+  sops.secrets."lemmy/smtp_login" = { };
+  sops.secrets."lemmy/smtp_password" = { };
+  sops.secrets."lemmy/smtp_from_address" = { };
 
   sops.templates.lemmy-prod.content = builtins.toJSON
     (config.services.lemmy-prod.settings // {
       setup = config.services.lemmy-prod.settings.setup // {
         admin_password = config.sops.placeholder."lemmy/initial_admin_password";
       };
+
+      # email = {
+      #   smtp_server = config.sops.placeholder."lemmy/smtp_server";
+      #   smtp_login = config.sops.placeholder."lemmy/smtp_login";
+      #   smtp_password = config.sops.placeholder."lemmy/smtp_password";
+      #   smtp_from_address = config.sops.placeholder."lemmy/smtp_from_address";
+      #   tls_type = "tls";
+      # };
     });
 
   systemd.services.lemmy-prod = {

diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index e96c897e3db502534afef097882bf0f3c9d10121..043dc8dc3e9f045d0e00b9def04d0a0765861e18 100644 (file)
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -1,5 +1,9 @@
 lemmy:
     initial_admin_password: ENC[AES256_GCM,data:fPDeGjYK1PK7dEp5JFbH2Q==,iv:PPol1OK6s54WGg4gmO9ss/u9+QM6YcIKTug7/8V442Y=,tag:R9Wv+9gGocgmFYwDUfPUlQ==,type:str]
+    smtp_server: ENC[AES256_GCM,data:4l7tfiwGfVCFnXQCEG6Gdhatnh2v,iv:uAZjGfoD7Ka4zjBafr0ktprvU/aexd4u1Rby4ls5kO4=,tag:2FYHnj+mTy+6gOWpMkz56w==,type:str]
+    smtp_login: ENC[AES256_GCM,data:ud57LkAv,iv:leOnFXK8Lm5W33UcrgAEMyb+baMcVMu687s7ih1Zp/g=,tag:7llUqPlMHEQuzsa+kNqaoA==,type:str]
+    smtp_password: ENC[AES256_GCM,data:vrqLNdNO0v3gSGF9A/I8rJ7JhgRpQXHulnJlFj0OTNDBWt+Mi7g1r8n2XDvf8YFPh6N15i98QvzHZ0lWo3PCRoYqbOz9,iv:3+/S6OzsdsNivGNEpsm74rmq5pp4n1RcwC0dNuhALcM=,tag:Oao44DUS4I8TjeQuyKzDmw==,type:str]
+    smtp_from_address: ENC[AES256_GCM,data:kpzULJxgqLbO5W6aDOao9OI=,iv:uCKQHZKFmStYmY4M4h1PnBwT1lHXiZeXXEYHPrbxEl8=,tag:ioMYOYuUYfxvX/K21KlzLw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -24,8 +28,8 @@ sops:
             NlNKT3g5dWlZckM0MTVwNVAzajU0YkEKyY98VzxcSz9NqaBsKV89Wegr+d0ZuzJH
             Yt5R1uCjeBHBNW3++qVRf2koWouPpMYa69eDrlRUkL0SkJXVC4QzqQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-06-25T23:58:12Z"
-    mac: ENC[AES256_GCM,data:5XuxyFuU5W/Lsy9Wq6RP2R9VPiR2jMaHsnofzzDGEYyuQSmi8eb/rdneJGDDR7Efmj9mz9rBxLvYAV2hVSokGz9y+2/J6L4D/C1FNDkxK5zsgUR5wHOoIdoUCTHwc8/XCIh8+PjZgRZqhTja9nuTdJ8FsKpswHun4XKTI5NKbXM=,iv:qZRs3FR0jBuVfc5FL3tfZXTm7LYF/eMsqfMPQAHqS/Q=,tag:gEnq3o0qY+Tmg+MarZssIg==,type:str]
+    lastmodified: "2023-06-29T10:57:55Z"
+    mac: ENC[AES256_GCM,data:cV3/ptlgCPM0G62bfxVJCW5xgx0rBsiaClifdFhPdqLbaJ2MpMCbujgw8RbX7RSKpq7tNMIrPaCvAmp5RQETd08FWnQbMjaKy2dDoQefYFspaDrv0atXU5ObXM37EEc2NMUgg/7U/JJPoeqUIBAOTyPA/Uf77HrY02LTxpW2Pwk=,iv:2C3RpLOo1ghkpygw9bWWX3JuSMJy2YHJZbLYJ1yLrmw=,tag:ZoLdrFEmM/ZFXLH1lV9vJA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3