Enable gitea email notifications

TODO.md

@@ -10,24 +10,13 @@
 - https://nixos.wiki/wiki/Comparison_of_NixOS_setups
 
 ### Housekeeping
-- Format everything here using nixfmt
 - Cleanup the line between hardware-configuration.nix and configuration.nix in machine config
 - CI https://gvolpe.com/blog/nixos-binary-cache-ci/
 - remove `options.currentSystem`
 - allow `hostname` option for webservices to be null to disable configuring nginx
 
 ### NAS
-- helios64 extra led lights
 - safely turn off NAS on power disconnect
-- hardware de/encoding for rk3399 helios64 https://forum.pine64.org/showthread.php?tid=14018
-- tor unlock
-
-### bcachefs
-- bcachefs health alerts via email
-- bcachefs periodic snapshotting
-- use mount.bcachefs command for mounting
-- bcachefs native encryption
-    - just need a kernel module? https://github.com/firestack/bcachefs-tools-flake/blob/kf/dev/mvp/nixos/module/bcachefs.nix#L40
 
 ### Shell Comands
 - tailexitnode = `sudo tailscale up --exit-node=<exit-node-ip> --exit-node-allow-lan-access=true`
@@ -53,7 +42,6 @@
 - replace nextcloud with seafile
 
 ### Archive
-- https://www.backblaze.com/b2/cloud-storage.html
 - email
     - https://github.com/Disassembler0/dovecot-archive/blob/main/src/dovecot_archive.py
     - http://kb.unixservertech.com/software/dovecot/archiveserver

common/server/gitea.nix

@@ -32,12 +32,19 @@ in
         };
         mailer = {
           ENABLED = true;
-          MAILER_TYPE = "sendmail";
+          MAILER_TYPE = "smtp";
-          FROM = "do-not-reply@neet.dev";
+          SMTP_ADDR = "mail.neet.dev";
-          SENDMAIL_PATH = "/run/wrappers/bin/sendmail";
+          SMTP_PORT = "465";
-          SENDMAIL_ARGS = "--";
+          IS_TLS_ENABLED = true;
+          USER = "robot@runyan.org";
+          FROM = "no-reply@neet.dev";
         };
       };
+      mailerPasswordFile = "/run/agenix/robots-email-pw";
+    };
+    age.secrets.robots-email-pw = {
+      file = ../../secrets/robots-email-pw.age;
+      owner = config.services.gitea.user;
     };
 
     # backups

common/server/mailserver.nix

@@ -37,6 +37,14 @@ in
           # catchall for all domains
           aliases = map (domain: "@${domain}") domains;
         };
+        "robot@runyan.org" = {
+          aliases = [
+            "no-reply@neet.dev"
+            "robot@neet.dev"
+          ];
+          sendOnly = true;
+          hashedPassword = "$2b$05$hkmwXGJSKuG/1.SmLecWSuzlq1F5pjp2ScoipQoVLR0ssSN5MgRs.";
+        };
       };
       rejectRecipients = [
         "george@runyan.org"

secrets/secrets.nix

@@ -15,6 +15,7 @@ in
   # email
   "email-pw.age".publicKeys = all;
   "sasl_relay_passwd.age".publicKeys = all;
+  "robots-email-pw.age".publicKeys = all;
 
   # vpn
   "iodine.age".publicKeys = all;