infrastructure

commit 6ff14382a8e331b211c5d06d733d638e63932e12
parent 952a024bc2f02833c96ff30648e01651d0fcee74
Author: Silas Brack <silasbrack@gmail.com>
Date:   Fri, 10 Jul 2026 21:36:42 +0200

mail-server: add mbsync schedule

Diffstat:
M
hosts/gaia/configuration.nix
 | 
5
+++++
M
hosts/gaia/home.nix
 | 
4
++--
M
secrets.yaml
 | 
5
+++--

3 files changed, 10 insertions(+), 4 deletions(-)
diff --git a/hosts/gaia/configuration.nix b/hosts/gaia/configuration.nix
@@ -22,6 +22,11 @@
   sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 
   sops.secrets.gaia_forgejo_access_token = { };
+  sops.secrets.silas_at_silasbrack_dot_com_password = { };
+  sops.templates."mail-password" = {
+    content = config.sops.placeholder.silas_at_silasbrack_dot_com_password;
+    owner = "silas";
+  };
   sops.templates."authinfo" = {
     content = "machine git.fnarglebeast.com/api/v1 login silas^forge password ${config.sops.placeholder.gaia_forgejo_access_token}\n";
     path = "/home/silas/.authinfo.gpg";
diff --git a/hosts/gaia/home.nix b/hosts/gaia/home.nix
@@ -45,7 +45,7 @@
           IMAPAccount silasbrack
           Host mail.silasbrack.com
           User silas@silasbrack.com
-          PassCmd "cat ~/.mail-password"
+          PassCmd "cat /run/secrets/rendered/mail-password"
           SSLType IMAPS
 
           IMAPStore silasbrack-remote
@@ -79,7 +79,7 @@
           auth on
           user silas@silasbrack.com
           from silas@silasbrack.com
-          passwordeval "cat ~/.mail-password"
+          passwordeval "cat /run/secrets/rendered/mail-password"
 
           account default : silasbrack
         '';
diff --git a/secrets.yaml b/secrets.yaml
@@ -10,6 +10,7 @@ gaia_forgejo_access_token: ENC[AES256_GCM,data:KpAnvpevOWgbNrEr+QynldkDqonVD90Mu
 mail_silas_password_hash: ENC[AES256_GCM,data:E3NCQ5/eRfpbaOVpK0Ovk/vE+h1q5/z7rZrSelQy2Qc++a6nMYA/q7/YmfFT2R68JwOJMaeNMnOKjn1A,iv:sGgRC5SRRiziBd5TVO273uouyFhRqvB0e04xDhifSfM=,tag:U1QxtlVbDUw+nhFm+ZnxOA==,type:str]
 daily_tracker_secret_key_base: ENC[AES256_GCM,data:kLjV/cxP/s8DJ+hAwGdKmzU+hQohEU1/tjBIrONtHQT/baYn874rHf1KYgn05OXP7J9074favlH4h1aQco+6og==,iv:7nSTefY8B19hGCW0XK/perQoRhgHxLD3dAcMrDbPlgw=,tag:HCAoGDcKE92ms4SpwEl3AA==,type:str]
 daily_tracker_mail_password: ENC[AES256_GCM,data:XCaEsrOmLoCQFurRc5X8l2YrtwGlp61j97XQTtPNGndzjqwXsjHfdHb/QO+V978fw9ZOWNrYKuSPR/t1,iv:jjhjPkyWmMFgPYQqNFagEttTW1b0u8nwSWiwKR+xT2U=,tag:WzCqt2S26vqO2I6sH3qqYQ==,type:str]
+silas_at_silasbrack_dot_com_password: ENC[AES256_GCM,data:HG9YCH+EmQHf5PxHFgZZPZdyQ/3BGMEPJ8ImlTZFBXKhjLP6nXtb9n/h3ez/2hak0cu2QZ2zcaC+3DZH,iv:sh1p4UAFJ0y14Xjm3mzVZLeZqKvtUyE04RLZMTfUYz0=,tag:hNTkAZM+qYqeYDTWgcBfLA==,type:str]
 sops:
     age:
         - recipient: age1s29qgfupgx7mqn9dk2rndp6xh63f5qan8vqa77ve603wd5m9a9rqkpq7re
@@ -48,7 +49,7 @@ sops:
             ZGptR25vdWhEKzFxbE5qS051ZFF4RkEK1hGCQVE1E92nFSwSeYRRhxn2p3wBfhpS
             TZMRsiXtUdlgnoa+IJcFKsbwaZspYnKCA93IEfOXy6TadcoNiFzypw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-31T20:15:47Z"
-    mac: ENC[AES256_GCM,data:bEFC9WYUYvXlbBfUe9+biAUc4QkSkIS0DO6qtIwDCOu32PmNHC6NDjE/ZzWCgwx6QOm0BH/5JKIEdiH1XhegOKi2BmH1M6tqRE3U7sHh2DCCn+bf9PuoKW/dcjXAQp7QS9MLZkTgw0HepKixiL6WAaszYNs9DtOhZzFEjHs8WSs=,iv:Sh8mCK4VbLSnf+eOYeI2YBjfDQIfQYc2XJGgw63I4kE=,tag:5hUMPrVbhCdIZr8VuvsrOA==,type:str]
+    lastmodified: "2026-07-10T19:19:30Z"
+    mac: ENC[AES256_GCM,data:SzXDN/p1+AXmQD4vuMZtOWVBS0aEReAtA61xUtAKGZEuae5CCixEbYaCYKyk/kb0g85DCZSh2UHrhMhKQvPvKwzGhpCFLUD7IXMVhxE1XmtbQqAER82LZUI9mNuEVB/k/kggsAS+5TC4JIDOSMYN9f+qaIBTrO+QFMDxZPygVXg=,iv:Z1CRLAZZHWclnNFemmgcS8W9e/fp+Z8vtH9QkCBHHKc=,tag:Rafm1YoOUJzHuzCTDRQdkQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.12.1