stuff and things

modules/nixos/sites/gitlab/default.nix

@@ -48,6 +48,11 @@ in {
       gitlab_runner = {
         file = ./sec/gitlab_runner.age;
       };
+      gitlab_email_pw = {
+        file = ./sec/gitlab-email-pw.age;
+        owner = user;
+        group = group;
+      };
     };
 
     boot.kernel.sysctl."net.ipv4.ip_forward" = true; # 1
@@ -97,6 +102,15 @@ in {
       port = 443;
       https = true;
       host = cfg.domain;
+
+      smtp = {
+        enable = true;
+        address = "mail.zoeys.cloud";
+        username = "gitlab@zoeys.cloud";
+        passwordFile = sec.gitlab_email_pw.path;
+        port = 465;
+      };
+
       secrets = {
         secretFile = sec.gitlab_sec.path;
         otpFile = sec.gitlab_otp.path;

modules/nixos/sites/gitlab/sec/gitlab-email-pw.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 CtmR6w wfPgH83/+qjITFELir/Q/zjH+wjlgrU+HNC5eOsFhg8
+orHZwCQOmlK9TFHOEOb/K2FszXoMbQfwHdYAbKIOnR0
+-> ssh-ed25519 RMNffg E7mah8eqt9cDw2SKQTah25M4j/iIWhPHtrtmJpSPDgo
+eeoo3cfoiVh8xF9TVy9cKUlAw6NBhMg1iFs8JlpquPA
+--- NB2RNduULAMPoBmfRByWGL1hdK5/b5kDe4vnzdW1Hb0
+±¶Hú"y£“«=Ùúñ,”î«ÐµÎè5|›V0âý’´1›´²qA³sNIÜÉ—R£qè¤NY!§Œl×®bÚ\LG·®e{En'™£ó<C2A3>Í”ØFh<B+sŽ¥ÌŽ¯š£‚v»ñ›c©Œèeˆ¶Ø4Û+ K÷…].<2E>¦9éü<1D>k\ý(ž’ÿÈ?¯çPÎk~Yy¤
+¥ˆ•!€‹w®ùÉ