feat(forgejo): Setup mail

machines/storage01/forgejo.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ config, pkgs, ... }:
 
 let
   port = 3000;
@@ -36,6 +36,8 @@ in
           EMAIL_DOMAIN_ALLOWLIST = "dgnum.eu,*";
 
           DISABLE_REGISTRATION = false;
+          REGISTER_EMAIL_CONFIRM = true;
+          ENABLE_NOTIFY_MAIL = true;
         };
 
         log.LEVEL = "Warn";
@@ -48,7 +50,7 @@ in
         };
 
         mailer = {
-          ENABLED = false;
+          ENABLED = true;
           FROM = "git@infra.dgnum.eu";
           MAILER_TYPE = "smtp";
           SMTP_ADDR = "kurisu.lahfa.xyz";
@@ -57,6 +59,8 @@ in
           USER = "web-services@infra.dgnum.eu";
         };
       };
+
+      mailerPasswordFile = config.age.secrets."forgejo-mailer_password_file".path;
     };
 
     nginx = {

machines/storage01/secrets/forgejo-database_password_file

@@ -1,27 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 rHotTw /3o+tx+q7K/9Uzgq6tJDEnIi6+B4widrRWNXwE/Ar2Q
-62uhJuFIzBdNQ1fhQQpg6zGbr6jYPpeaTYr/5vKfG5w
--> ssh-ed25519 jIXfPA cr/LauK0lDer6sWDyuLIlLZ6vVAZOQiiMJppyN1VGCY
-6GTU5yNu8OYcFuDUM86fbxb+SBgN3mfGCLR5fvyEu6M
--> ssh-ed25519 QlRB9Q 9kLq7vwUMOV2tkZ1PZQdJMz7bTQdKbCKZUJAGnBv4U4
-1Zw0WUMIUf5SJEtvyH0UmCxoaCpCrKrh5mpolAKsito
--> ssh-ed25519 r+nK/Q jgHCpA6njdjJBnx+XmKgZQOa5nY0t/WcCrw3zdOs0AU
-Yk1cdPZyMfc2p6++kd0I05hQ3vWemCtVLtBpdxT9et8
--> ssh-rsa krWCLQ
-AAq77XREUYnKs4N5OzwaMiTqrbg57XfWbYChRxIDl93nSSHCO+OzSHac9LZkEUzx
-7/yD0lUzSmP9izW2jMKUgErUVhDEURc+e+oHJGulYmjnUb7Uq6r0CJqUJJOUz1I0
-MqLffZNzCDJg+4dEvnoGlYtIAHQAHxkWVRonLadjyT8M6CKvhn2sBptGJV+FzprJ
-iiSW1cP1Ogs2Uw6SGQNdj0sPMrOUBr+Ads3mkqMo7o4F4X2lUGqTeQ19acVCvLoS
-Ibkq+6+2MMD731bQ1/LHSfrXW2x7MIaj4VWZI/ZtGliASqel3vd/cGdQQUdypEsJ
-4JZj8D9OwwLVeexnvSkXhw
--> ssh-ed25519 /vwQcQ eJgbyVM7k9CozIBDiuakc5aRGIIIWw6cNmvgsVAAsHE
-+rF4Fu0TenvNLj60FGmyDKNeFBSsUSHsk4gonYk5DcA
--> ssh-ed25519 0R97PA AXBUUdrP3kMxq9s3L6A/6iLutV68wgqDNh/WwhlLKWs
-5PTPn0O/npU81KtvNFejU6u17yk8neZm5lg/hGTybFA
--> ssh-ed25519 JGx7Ng wzuo6kXtfltola6VjKZTf9Y3IWwBhZfprcoulluTnEs
-b8zw3WW/b6QM/8UZmbL/MAE/QUm18053EOBMpG471qc
--> 5!cP*-grease Ss`m + K]g z{F9?8
-9EiZB6aeE5UcJr4Q1CcNVu4rHnY
---- e6OaSbektjO17yPRqxAqfDjDoVF9QafMXCfOFqq0y5g
-»FÐÃ?üÀ×êl|`Lä
-â4²Ã.0ž<>ç<EFBFBD>%"‰ÈëSZ‰ÞDCÃÈY‹lÝ­Ù„›'
S¢U

machines/storage01/secrets/forgejo-mailer_password_file

@@ -0,0 +1,24 @@
+age-encryption.org/v1
+-> ssh-ed25519 rHotTw qQiJYgYb07sFhRjR6IpMvhdw8SoShzHBCn8AUsG/OQw
+hL3PJl47hVtLbD/h1LKcbvkXKk7aGhAfaRSjyYxfL20
+-> ssh-ed25519 jIXfPA WAYUzqcf17MzIAPMpsPEHNGZcKmI/WZcIYCXB/pKeXQ
+123G7ZTB+AKCjc8EGF+TCKDNr+ANpokAhpTeXYXzuVE
+-> ssh-ed25519 QlRB9Q R7SAJ7OniaUPp3ppRRCsu9BHgWkJR3AWAAST4jho2DA
+VHHdoR9ZgYxxlydQwgAvfmHg0cJO598Zs4IVCP7B16s
+-> ssh-ed25519 r+nK/Q PY5cUV4FTZw5ZM4Fnq3hii1FfaOb/E+i99PdKviL1Bk
+Vxhj87DotHG3L/iafihIRLhFl7BIELQNaBQgs2DXvaA
+-> ssh-rsa krWCLQ
+LK8OkVMChJ7DcXUhRBwzTU5NqoG8avsR2JumAUCfDU4+QN56Kw5qomDSayBCTrM8
+7nlFpvuqQ+gYgD4Ms5wwpUkw+YPQF+WiSalsDl3aXLpMHR8UyamP8+ty/vaxyssk
+nvWe6jITOEgV+Y9Yp4a5xWEpoIoiR+28+nF0bmHYshu7Y6zjpwrmEcVLvFuIK/4D
+qXrQzqKSvi4uRk+7ugAahEwf6VtuIh58YaYLklVrF6hglWwRyE/dxiDnp7eDQKB0
+mtqdwQC2x06eICpz31DTgBXz7F/BztSgUNsS3ejC1MzLpY9CXXzd7J3OrPcjTvjc
+BtoDSsKekH4yPTOmUEB12g
+-> ssh-ed25519 /vwQcQ JsheOMV6PUlIvSSQjaEn68BHA0PRbOhPJiVIvQes6QI
+7lR/YTg56W0jW7QLDvVq1RhmkpZ92ibFT/H8dqlqZfk
+-> ssh-ed25519 0R97PA kkX7r3iZ8KkzPcfC+CVRrYR0zubBfptMaGyhTg7q6kE
+w75nfz7eOE+TZTLb5GBW3aSyRe2G7173u9LtfKcRj78
+-> ssh-ed25519 JGx7Ng 0Gm6MlkhcqCsQfGLvXhcqPUcmPaFlrDUHn7OlcgYqjI
+9lkW+1w5kKAx625bXQY+hAZgXPteEUv9KAZJ607VQ8I
+--- cSqPHjj0wSYIZmvbA3tEskrqhszf5ipj2zrVwz/wIIg
+g%SzUâªU—5%ÿ3Ë¢‘ÿ mc,™žó6O|HñÉp`NVÂÂ
²À£<1A>5°ºYÓÿt6LÛ<¶öÁ+

machines/storage01/secrets/secrets.nix

@@ -4,7 +4,7 @@ let
 in
 lib.setDefault { inherit publicKeys; } [
   "atticd-credentials_file"
-  "forgejo-database_password_file"
+  "forgejo-mailer_password_file"
   "forgejo_runners-token_file"
   "garage-environment_file"
   "netbird-auth_client_secret_file"