chore(forgejo): add mail

config/services/forgejo.nix

@@ -68,11 +68,21 @@ in
       mode = "0700";
     }
   ];
-  age.secrets.forgejo-mailer-passwd = {
-    rekeyFile = config.node.secretsDir + "/forgejo-passwd.age";
-    owner = "git";
+  age.secrets.maddyPasswd = {
+    generator.script = "alnum";
     group = "git";
-    mode = "0700";
+    mode = "0750";
+  };
+  nodes.maddy = {
+    age.secrets.forgejoPasswd = {
+      inherit (config.age.secrets.maddyPasswd) rekeyFile;
+      inherit (nodes.maddy.config.services.maddy) group;
+      mode = "640";
+    };
+    services.maddy.ensureCredentials = {
+      "forgec@${config.secrets.secrets.global.domains.mail_public}".passwordFile =
+        nodes.maddy.config.age.secrets.forgejoPasswd.path;
+    };
   };
 
   services.forgejo = {
@@ -82,9 +92,9 @@ in
     user = "git";
     group = "git";
     lfs.enable = true;
-    secrets.mailer.PASSWD = config.age.secrets.forgejo-mailer-passwd.path;
+    secrets.mailer.PASSWD = config.age.secrets.maddyPasswd.path;
     settings = {
-      DEFAULT.APP_NAME = "Patricks tolles git"; # tungsten inert gas?
+      DEFAULT.APP_NAME = "Patricks tolles git";
       actions = {
         ENABLED = true;
         DEFAULT_ACTIONS_URL = "github";
@@ -99,9 +109,9 @@ in
       # federation.ENABLED = true;
       mailer = {
         ENABLED = true;
-        SMTP_ADDR = config.secrets.secrets.local.forgejo.mail.host;
-        FROM = config.secrets.secrets.local.forgejo.mail.from;
-        USER = config.secrets.secrets.local.forgejo.mail.user;
+        SMTP_ADDR = "smtp.${config.secrets.secrets.global.domains.mail_public}";
+        FROM = "forge@${config.secrets.secrets.global.domains.mail_public}";
+        USER = "forge@${config.secrets.secrets.global.domains.mail_public}";
         SEND_AS_PLAIN_TEXT = true;
       };
       oauth2_client = {
@@ -124,9 +134,6 @@ in
         ROOT_URL = "https://${forgejoDomain}/";
         LANDING_PAGE = "login";
         SSH_PORT = 9922;
-        # TODO
-        # port forwarding in fritz box
-        # port forwarding in elisabeth
       };
       service = {
         DISABLE_REGISTRATION = false;

hosts/elisabeth/secrets/forgejo/forgejo-passwd.age

@@ -1,16 +0,0 @@
-age-encryption.org/v1
--> X25519 CMoCS3EqmXVkwSVuMB51DnV80S/H5zk8IcQeJxEqO0w
-En/MAzeFWfcLrcUO4Ukt1zNBf5uVq+v0pBjz6+Um91U
--> piv-p256 XTQkUA A/AOwf+EXSep90xsABet03k1M+qNfxtRpRGR98Los0z0
-qid6WZum67EFiXR1hKjHrBIAnXfTqLipUpBhOAjWci4
--> piv-p256 ZFgiIw A2QJdu+pkCF+oKjdRK6bZxESjy//RquUc8+mDoDj5fQ2
-0WqGNebppaN+RmIiDTh2j0SvmqakOt/qUhEc3mODXpU
--> piv-p256 5vmPtQ Ahcpp40amXecurWAP9dfZ1h7v49HPj0Bz9dvt8Cj9tB+
-kA/6aHJw5/GyqUXb8t15TPYxu8ZpNzGCD6/XRCPijPk
--> piv-p256 ZFgiIw ArryoUHlGkAM2e1BP1wfYeGceai5nKtvza3atjIxhh8B
-bUKrpqhGst+Az60k7wy5hZMUsXq7f+VTcwuce0M/7pM
--> m\)y8qgO-grease ~N/[^ p8q(OzUj ztrT
-0aZbW62GiFb8D7hcs4NT/OwKjpBpOYNslzhZRanUZpLr9t6+E4qXjCpAMTkg8UQe
-SWw3pFmGBmaQh6rGJy1/J3VdLI0
---- 9muabfoma9i62RxKgrGcp9bPYAjjDH3dLB3DJyjR58A
-]׊6§ă,^śş‡=<3D>Ý夬¤öO.<Fâ+ °$NűÁ—'ĹßľDŐłJş§»>:X”ßő7I@[0úL—¦říč">w