From 1065cc4b594b8d0184e2a698a7a82d257f729f5e Mon Sep 17 00:00:00 2001
From: Zuckerberg <zuckerberg@neet.dev>
Date: Sun, 9 Apr 2023 22:05:23 -0600
Subject: [PATCH] Enable gitea email notifications

---
 common/server/gitea.nix      |  15 +++++++++++----
 common/server/mailserver.nix |   8 ++++++++
 secrets/robots-email-pw.age  | Bin 0 -> 1133 bytes
 secrets/secrets.nix          |   1 +
 4 files changed, 20 insertions(+), 4 deletions(-)
 create mode 100644 secrets/robots-email-pw.age

diff --git a/common/server/gitea.nix b/common/server/gitea.nix
index 8b3e963..31ee0a7 100644
--- a/common/server/gitea.nix
+++ b/common/server/gitea.nix
@@ -32,12 +32,19 @@ in
         };
         mailer = {
           ENABLED = true;
-          MAILER_TYPE = "sendmail";
-          FROM = "do-not-reply@neet.dev";
-          SENDMAIL_PATH = "/run/wrappers/bin/sendmail";
-          SENDMAIL_ARGS = "--";
+          MAILER_TYPE = "smtp";
+          SMTP_ADDR = "mail.neet.dev";
+          SMTP_PORT = "465";
+          IS_TLS_ENABLED = true;
+          USER = "robot@runyan.org";
+          FROM = "no-reply@neet.dev";
         };
       };
+      mailerPasswordFile = "/run/agenix/robots-email-pw";
+    };
+    age.secrets.robots-email-pw = {
+      file = ../../secrets/robots-email-pw.age;
+      owner = config.services.gitea.user;
     };
 
     # backups
diff --git a/common/server/mailserver.nix b/common/server/mailserver.nix
index 08723c0..b58cc9d 100644
--- a/common/server/mailserver.nix
+++ b/common/server/mailserver.nix
@@ -37,6 +37,14 @@ in
           # catchall for all domains
           aliases = map (domain: "@${domain}") domains;
         };
+        "robot@runyan.org" = {
+          aliases = [
+            "no-reply@neet.dev"
+            "robot@neet.dev"
+          ];
+          sendOnly = true;
+          hashedPassword = "$2b$05$hkmwXGJSKuG/1.SmLecWSuzlq1F5pjp2ScoipQoVLR0ssSN5MgRs.";
+        };
       };
       rejectRecipients = [
         "george@runyan.org"
diff --git a/secrets/robots-email-pw.age b/secrets/robots-email-pw.age
new file mode 100644
index 0000000000000000000000000000000000000000..ff9a7250e6d74ce5167cce0ccd9362df2a912fc8
GIT binary patch
literal 1133
zcmZY7z3by-0KjpVL&ze6?l~8S&};M7G%8Bo`pbLsq|HmSXqxvlP12<8lN9uSa1c%o
z2N85ua5xa$TpR>nK!=+=5gZiJ$w55V-~9z2zVHpRWRlcTH@2susqZyiHof4;<aM;~
z^GOmDG>x<9&~OI^qTG5N`Eo!SggAP=Y&0iU-zh6*vllLBX$|;8!8SFcWFtVjjJIMh
z9pkxB*JlmVq2SvqL+P#2bRkp>{aS5KncSMnZSAmwi-ALN+7VQ79WUC8dBO`SqK{_N
zh_dfk`Z0_tYVf@)jFnJ`5K%o7ltg2>w;=jrP^P_Q*Ot+So<*$OM3SHf%#Kv?!&4d&
z65AZ2{&K;2KsYR!I5j;>Un`tB!%CM4OmIVnW0i1CJ2Latut0K7t(W?+<ITOfq_Iu0
zb!m;?0!~ks$^p0%EYst#<RP`c-4+{Q+hnNj3KY;daP6%)<F+<b1KZO<>=9NrElQm>
z7<+*G^fE-qmAtvx2YQ|P-LPR?Hn;NgZYy8LE@zKATd{M}&FYI}>C|m)&TWWkhR#iq
zH+;%vRIhC^fgXciueG?Xb!O&s@vt-PHKuipQ8mbctVK@h7F|Po&cW2nRL&gUxN6so
zEi4{)vMOfBBSEIoZEciA4nPzalhvl04<T_NN<ot-eeP`ws8%bSjQhCp<x6gQnF2tB
zj3%y~a(L;Vn3W7eXVCa=4k)<gJPK=j6<ow7+^Z{Vc3X4Dtvm&2c5LxvdQFlN^0n(}
z7VdfyRStmlBi_h@rN5}@t<a}VkEoU~4H;i(k4848O5i1~HBGCnSJK5rgi>X?1dVCw
z8GouRw_3c0C=Ey{kxkJOPOBQD<hI`orb5s5J`T>z*<3|I4Ne>1Ati+NXFH=4;o4f4
zrBj6UW?^J23D_7mhlwPBNDp?h9b%&Me_KA0-@f}2H_5sr>=Oh}{7bwEXHiTj?S87a
z1F?^^;CzD64vJpy&k@_`=|MH}j#qbQwq`PtcH<}8O7^U;5H>$}y1fVl@}#n`G?2+;
zg4znTV40i7H5WHp<#~?5w(<}b<6PO}OfQS1iS2Bju2v56@ZG=fncUq6KXsox`r`4O
zZ~uAa%}2k!QF{+Qe)+ji(ck|3S$S4l{*}JJd*_4S-z%PZ75nk)*B(Fr(Kny@<@f*o
c@%fkE{gQq~h4+7$ym;r~hcCQER^9#o078p-G5`Po

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 045bbb0..33f40c3 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -15,6 +15,7 @@ in
   # email
   "email-pw.age".publicKeys = all;
   "sasl_relay_passwd.age".publicKeys = all;
+  "robots-email-pw.age".publicKeys = all;
 
   # vpn
   "iodine.age".publicKeys = all;