Enable gitea email notifications

common/server/gitea.nix

@@ -32,12 +32,19 @@ in
         };
         mailer = {
           ENABLED = true;
-          MAILER_TYPE = "sendmail";
+          MAILER_TYPE = "smtp";
-          FROM = "do-not-reply@neet.dev";
+          SMTP_ADDR = "mail.neet.dev";
-          SENDMAIL_PATH = "/run/wrappers/bin/sendmail";
+          SMTP_PORT = "465";
-          SENDMAIL_ARGS = "--";
+          IS_TLS_ENABLED = true;
+          USER = "robot@runyan.org";
+          FROM = "no-reply@neet.dev";
         };
       };
+      mailerPasswordFile = "/run/agenix/robots-email-pw";
+    };
+    age.secrets.robots-email-pw = {
+      file = ../../secrets/robots-email-pw.age;
+      owner = config.services.gitea.user;
     };
 
     # backups

common/server/mailserver.nix

@@ -37,6 +37,14 @@ in
           # catchall for all domains
           aliases = map (domain: "@${domain}") domains;
         };
+        "robot@runyan.org" = {
+          aliases = [
+            "no-reply@neet.dev"
+            "robot@neet.dev"
+          ];
+          sendOnly = true;
+          hashedPassword = "$2b$05$hkmwXGJSKuG/1.SmLecWSuzlq1F5pjp2ScoipQoVLR0ssSN5MgRs.";
+        };
       };
       rejectRecipients = [
         "george@runyan.org"

secrets/secrets.nix

@@ -15,6 +15,7 @@ in
   # email
   "email-pw.age".publicKeys = all;
   "sasl_relay_passwd.age".publicKeys = all;
+  "robots-email-pw.age".publicKeys = all;
 
   # vpn
   "iodine.age".publicKeys = all;