commit f8d16d972f187bfb02872c27e41fab8b27765895 · yemou.pink/nix-configs

+5 -1

.sops.yaml

···

       15
       15
        
           key_groups:

     

       16
       16
        
             - age:

     

       17
       17
        
               - *lutea

     

       18
       18
       -
       

     

       18
       18
       +
         - path_regex: secrets/lilu.yaml$

     

       19
       19
       +
           key_groups:

     

       20
       20
       +
             - age:

     

       21
       21
       +
               - *lily

     

       22
       22
       +
               - *lutea

+29

modules/msmtp.nix

···

       1
       1
       +
       { config, pkgs, ... }:

     

       2
       2
       +
       {

     

       3
       3
       +
         sops = {

     

       4
       4
       +
           secrets = {

     

       5
       5
       +
             "y6d-smtp/user".sopsFile = ../secrets/lilu.yaml;

     

       6
       6
       +
             "y6d-smtp/pass".sopsFile = ../secrets/lilu.yaml;

     

       7
       7
       +
           };

     

       8
       8
       +
           templates.msmtp-user.content = ''

     

       9
       9
       +
             user ${config.sops.placeholder."y6d-smtp/user"}

     

       10
       10
       +
           '';

     

       11
       11
       +
         };

     

       12
       12
       +
       

     

       13
       13
       +
         programs.msmtp = {

     

       14
       14
       +
           enable = true;

     

       15
       15
       +
           defaults = {

     

       16
       16
       +
             tls = true;

     

       17
       17
       +
             tls_starttls = false;

     

       18
       18
       +
             port = 465;

     

       19
       19
       +
             logfile = "/var/log/msmtp.log";

     

       20
       20
       +
             from = "%F";

     

       21
       21
       +
           };

     

       22
       22
       +
           accounts.default = {

     

       23
       23
       +
             auth = true;

     

       24
       24
       +
             host = "smtp.purelymail.com";

     

       25
       25
       +
             eval = "${pkgs.coreutils}/bin/cat ${config.sops.templates.msmtp-user.path}";

     

       26
       26
       +
             passwordeval = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."y6d-smtp/pass".path}";

     

       27
       27
       +
           };

     

       28
       28
       +
         };

     

       29
       29
       +
       }

+27

secrets/lilu.yaml

···

       1
       1
       +
       y6d-smtp:

     

       2
       2
       +
           user: ENC[AES256_GCM,data:IZK759k1/F6v,iv:Aj92dOU58OU1zCcCsKeaHzsvWePRo6s8sE5mMMwM4DM=,tag:1V12iaPqjroNBQfaJHlP5Q==,type:str]

     

       3
       3
       +
           pass: ENC[AES256_GCM,data:q6bhty/EUUYIV+VQ9ZLHNjODOqA=,iv:aJ2+ToXQGLmZtO06ZXBwa6OGt7qil/mSbBG4VI6muRU=,tag:zn4mzLC7+qh40lP07ZEzPQ==,type:str]

     

       4
       4
       +
       sops:

     

       5
       5
       +
           age:

     

       6
       6
       +
               - recipient: age1amaa55e7nusv904a9ucfvtnjlw4srtet42suehey6u3yc4t2xc5sdldepj

     

       7
       7
       +
                 enc: |

     

       8
       8
       +
                   -----BEGIN AGE ENCRYPTED FILE-----

     

       9
       9
       +
                   YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwTzVOd1J6MC9CNngwMmwx

     

       10
       10
       +
                   NFdKODdFa3BEdGhrK1ZWd0FFdmJyZmxOVFFFCnRsOC9YeDBIRGUrdnlXUDI5dkJt

     

       11
       11
       +
                   V2l6a0JldXpwSjZoSWl5NEhaN29IeXcKLS0tIENudEZwcWNKZU45YWpqWjg5N281

     

       12
       12
       +
                   TDJTcmxZckRMMHFNQTM4eUhXRWdjeGMKaxFPulpG7hqzjGx9UicetztDbDT6gPuI

     

       13
       13
       +
                   vuyNaQviUCfpxyLXHNk2zgeuLEX7inKKdBi9mH/uhcNJ1n8NGmlEVQ==

     

       14
       14
       +
                   -----END AGE ENCRYPTED FILE-----

     

       15
       15
       +
               - recipient: age1p55em5e3uk3fprj2mpum7ulrslcqgly63pjsyw2yv6hx99trdsnsvvv9ex

     

       16
       16
       +
                 enc: |

     

       17
       17
       +
                   -----BEGIN AGE ENCRYPTED FILE-----

     

       18
       18
       +
                   YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3NGlOU21ZRjFzeVJOdWJi

     

       19
       19
       +
                   d2FPai85N05zRTRGUGM5dnFDUnEzT1c0SVhnCnF3VS9pSmFWNEt6cmMzeDhwRGJj

     

       20
       20
       +
                   ck1BMG1jdFVHVG5Icm0xMUtBZmFKNU0KLS0tIEZ0T0JJV1Y3ZEZKQUx6elp2K05j

     

       21
       21
       +
                   cm43OGNYd1ZnbEM0NjVYY3ZOdi94Sk0Kn8jz57CaoCE3ceFv1TNsYdqW83sqxYiy

     

       22
       22
       +
                   4X21omXCeqpRG5DC2QyAJQE/93lBhsHKIMCraNMaOycPlVQYdyTviA==

     

       23
       23
       +
                   -----END AGE ENCRYPTED FILE-----

     

       24
       24
       +
           lastmodified: "2025-08-05T22:10:59Z"

     

       25
       25
       +
           mac: ENC[AES256_GCM,data:Bqymx8fJKDcpr8GfP3fK+PPNivhPCyBx6yiybje0MOwMP4Qrc06YeYyktvV0z0MvPqOf31FMXMYbwYjuWOgUPKCsFC9QGLcshAnD9qG7LxX+5PaonFCk0LAUW5NABluGSkTViM6wCywqoSUB9BC8xnw8kSrMO7yXzJghIr6rusw=,iv:BmOKCn+p14ZKSAsn+nDQYWlPZsJFJEjGMyKuz9d9IY4=,tag:CpVMaMywwLVQYKFMx5l6WA==,type:str]

     

       26
       26
       +
           unencrypted_suffix: _unencrypted

     

       27
       27
       +
           version: 3.10.2