From 4f9142b02d9162f8b66624fd856336d1455bef6c Mon Sep 17 00:00:00 2001 From: self <self@awful.systems> Date: Fri, 30 Jun 2023 10:31:08 -0700 Subject: [PATCH] add mail server secrets --- lemmy/default.nix | 12 ++++++++++++ secrets/secrets.yaml | 8 ++++++-- 2 files changed, 18 insertions(+), 2 deletions(-) diff --git a/lemmy/default.nix b/lemmy/default.nix index c89e030..85ae4ca 100644 --- a/lemmy/default.nix +++ b/lemmy/default.nix @@ -21,12 +21,24 @@ }; sops.secrets."lemmy/initial_admin_password" = { }; + sops.secrets."lemmy/smtp_server" = { }; + sops.secrets."lemmy/smtp_login" = { }; + sops.secrets."lemmy/smtp_password" = { }; + sops.secrets."lemmy/smtp_from_address" = { }; sops.templates.lemmy-prod.content = builtins.toJSON (config.services.lemmy-prod.settings // { setup = config.services.lemmy-prod.settings.setup // { admin_password = config.sops.placeholder."lemmy/initial_admin_password"; }; + + # email = { + # smtp_server = config.sops.placeholder."lemmy/smtp_server"; + # smtp_login = config.sops.placeholder."lemmy/smtp_login"; + # smtp_password = config.sops.placeholder."lemmy/smtp_password"; + # smtp_from_address = config.sops.placeholder."lemmy/smtp_from_address"; + # tls_type = "tls"; + # }; }); systemd.services.lemmy-prod = { diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index e96c897..043dc8d 100644 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -1,5 +1,9 @@ lemmy: initial_admin_password: ENC[AES256_GCM,data:fPDeGjYK1PK7dEp5JFbH2Q==,iv:PPol1OK6s54WGg4gmO9ss/u9+QM6YcIKTug7/8V442Y=,tag:R9Wv+9gGocgmFYwDUfPUlQ==,type:str] + smtp_server: ENC[AES256_GCM,data:4l7tfiwGfVCFnXQCEG6Gdhatnh2v,iv:uAZjGfoD7Ka4zjBafr0ktprvU/aexd4u1Rby4ls5kO4=,tag:2FYHnj+mTy+6gOWpMkz56w==,type:str] + smtp_login: ENC[AES256_GCM,data:ud57LkAv,iv:leOnFXK8Lm5W33UcrgAEMyb+baMcVMu687s7ih1Zp/g=,tag:7llUqPlMHEQuzsa+kNqaoA==,type:str] + smtp_password: ENC[AES256_GCM,data:vrqLNdNO0v3gSGF9A/I8rJ7JhgRpQXHulnJlFj0OTNDBWt+Mi7g1r8n2XDvf8YFPh6N15i98QvzHZ0lWo3PCRoYqbOz9,iv:3+/S6OzsdsNivGNEpsm74rmq5pp4n1RcwC0dNuhALcM=,tag:Oao44DUS4I8TjeQuyKzDmw==,type:str] + smtp_from_address: ENC[AES256_GCM,data:kpzULJxgqLbO5W6aDOao9OI=,iv:uCKQHZKFmStYmY4M4h1PnBwT1lHXiZeXXEYHPrbxEl8=,tag:ioMYOYuUYfxvX/K21KlzLw==,type:str] sops: kms: [] gcp_kms: [] @@ -24,8 +28,8 @@ sops: NlNKT3g5dWlZckM0MTVwNVAzajU0YkEKyY98VzxcSz9NqaBsKV89Wegr+d0ZuzJH Yt5R1uCjeBHBNW3++qVRf2koWouPpMYa69eDrlRUkL0SkJXVC4QzqQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-06-25T23:58:12Z" - mac: ENC[AES256_GCM,data:5XuxyFuU5W/Lsy9Wq6RP2R9VPiR2jMaHsnofzzDGEYyuQSmi8eb/rdneJGDDR7Efmj9mz9rBxLvYAV2hVSokGz9y+2/J6L4D/C1FNDkxK5zsgUR5wHOoIdoUCTHwc8/XCIh8+PjZgRZqhTja9nuTdJ8FsKpswHun4XKTI5NKbXM=,iv:qZRs3FR0jBuVfc5FL3tfZXTm7LYF/eMsqfMPQAHqS/Q=,tag:gEnq3o0qY+Tmg+MarZssIg==,type:str] + lastmodified: "2023-06-29T10:57:55Z" + mac: ENC[AES256_GCM,data:cV3/ptlgCPM0G62bfxVJCW5xgx0rBsiaClifdFhPdqLbaJ2MpMCbujgw8RbX7RSKpq7tNMIrPaCvAmp5RQETd08FWnQbMjaKy2dDoQefYFspaDrv0atXU5ObXM37EEc2NMUgg/7U/JJPoeqUIBAOTyPA/Uf77HrY02LTxpW2Pwk=,iv:2C3RpLOo1ghkpygw9bWWX3JuSMJy2YHJZbLYJ1yLrmw=,tag:ZoLdrFEmM/ZFXLH1lV9vJA==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.7.3 -- 2.44.1