diff --git a/hosts/carrot/outline.nix b/hosts/carrot/outline.nix index ae49cff..5b6384f 100644 --- a/hosts/carrot/outline.nix +++ b/hosts/carrot/outline.nix @@ -6,6 +6,11 @@ inherit (config.services.outline) group; }; + x.sops.secrets."services/outline/mailPwd" = { + owner = config.services.outline.user; + inherit (config.services.outline) group; + }; + services.nginx = { enable = true; virtualHosts."outline.xanderio.de" = { @@ -38,6 +43,16 @@ scopes = [ "openid" "profile" "email" ]; }; + smtp = { + host = "mail.xanderio.de"; + port = 465; + username = "outline"; + passwordFile = config.sops.secrets."services/outline/mailPwd".path; + fromEmail = "Outline "; + replyEmail = "noreply@xanderio.de"; + secure = true; + }; + # nginx already handels this forceHttps = false; }; diff --git a/secrets/services/outline.yaml b/secrets/services/outline.yaml index aa2f561..dd173ae 100644 --- a/secrets/services/outline.yaml +++ b/secrets/services/outline.yaml @@ -1,6 +1,7 @@ services: outline: oidc-client-secret: ENC[AES256_GCM,data:IUmImFy7cCrTHF40DqwojjRfJZp5pzR2bBYB4HwHNgy5GKOd+P0hXqnLfwr6Jyaf0atu6dJLQOj5msVrjSzxLSJ9LOB8xU4R5JvzqAo6Va6KwmMMVw3zeH2A3JLsUm34+yM15vWHibgehqpPESlf2Ek9U50dXsoQxmCR5935Bco=,iv:P1wNStslzdHBDAv6G1u42cPHBY8zjTauTOSWJDgoeb8=,tag:4UIKLgpLxovCdMm7DNhEyw==,type:str] + mailPwd: ENC[AES256_GCM,data:ILL9PmfOqxVpGJ2NxZopnADP5w==,iv:2VLJxC7Ql15SJPkIRy6T/0p+W1MElL9YuT5dMP98Zbc=,tag:5O1jmKKRMimua8PZANNfHQ==,type:str] sops: kms: [] gcp_kms: [] @@ -25,8 +26,8 @@ sops: YmtvZXdZKzh2QmFIQ20vNGovQmhkRUUKwK1rTSK1VCSQF2BseYiTqgFA+pAhdMXI V1UPWnB0zakblm1Bl7nCLk9ASEn+OxboTpQv5o2UUjkQLZQWDsFlNQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-05-24T14:17:21Z" - mac: ENC[AES256_GCM,data:A+p+GU8CZdHpPK/QSGT1LpAx9WjkwJ7xdNhVLySWNt1/Tt7OM/xvTW6/xecEcakiaLpPszdZ+VI+vxEod0+jn1OUnfEN2DP2WqQW7KiqDhLYpF56wLUqobjn2gF7jQX+guibj9TerKEVQXFIsOB63MvYEpKqrCagFXFWZxZhsMI=,iv:p7Eg+BiZ46IBX1dMMm46TFAKMbiKU3CcAL8IEJ50KRI=,tag:Fm3v9bzRxrAsTpvq0jEumw==,type:str] + lastmodified: "2024-06-07T14:16:34Z" + mac: ENC[AES256_GCM,data:EVn7nMFO0cYJTw8rRynNfdTNsPa4zO98z16wxktXHWIukBjikF68oahmWpL9CKDeZ/h4LuvzVFLaGhHQ6TMPYvoHnu2oE9v3XGhJ/unv8fajWXnvwo1SLzS++zIXJcW7UrAw/C+Z1D1Ylq1+VyKUf96VhC1UVJ/GaM4mXt88D30=,iv:crFoNr8XOshTQGkp5WX2YpI8wBJsOT4+KP35CR41ujs=,tag:iwAQo7JSiSS/WPM2KriJVw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.8.1