diff --git a/.sops.yaml b/.sops.yaml index def7eecb..64579fbf 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -49,3 +49,8 @@ creation_rules: - *pc-installer - *rainbow-resort - *thinkrac + - path_regex: programs/desktop/pim/secrets.yaml$ + key_groups: + - age: + - *base + - *darkkirb \ No newline at end of file diff --git a/programs/desktop/pim/calendar.nix b/programs/desktop/pim/calendar.nix new file mode 100644 index 00000000..986134e2 --- /dev/null +++ b/programs/desktop/pim/calendar.nix @@ -0,0 +1,22 @@ +{ pkgs, config, ... }: +{ + accounts.calendar.accounts.lotte = { + khal = { + enable = true; + addresses = [ "lotte@chir.rs" ]; + }; + primary = true; + remote = { + passwordCommand = [ + "${pkgs.coreutils}/bin/cat" + config.sops.secrets."accounts/calendar/accounts/lotte/remote/password".path + ]; + type = "caldav"; + url = "https://calendar.zoho.eu/caldav/423167e221264cf4af974b9faa0abc3b/events/"; + userName = "lotte@chir.rs"; + vdirsyncer.enable = true; + }; + }; + accounts.calendar.basePaths = "Data/.calendar"; + sops.secrets."accounts/calendar/accounts/lotte/remote/password".sopsFile = ./secrets.yaml; +} diff --git a/programs/desktop/pim/secrets.yaml b/programs/desktop/pim/secrets.yaml new file mode 100644 index 00000000..d0a02997 --- /dev/null +++ b/programs/desktop/pim/secrets.yaml @@ -0,0 +1,35 @@ +accounts: + calendar: + accounts: + lotte: + remote: + password: ENC[AES256_GCM,data:Y+ITsQj6vFJ2Jgk8,iv:ZrdVVxh2L9pJKhLWaz3BE+IU0xasn4WQ1Jm0kpnWMLI=,tag:gTJsmCNqnKNbhBXJipijbA==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZit5SC9uVEpHUlFLSlVj + NWdyK3FLaTIwYnowdDdVWXJhVUcyczNEckVZCmdpU1VQZTFpeDRMN0FBTU0wOGs2 + MTBWTFg1V21BUitpWXZUbSs5bHJHSTAKLS0tICttZk1ldGFoaEloYmErR3J6OHA5 + V0FCYjdlckhkR3VOWjJkdDFFMzJucUkKC+Ru5SgA1h/vNV95L4homj8jIHgJ8OLc + YbkptH9Yk86491HxgbXNfDjYTxyemOldD5Z9TGWIGkXPQNpTIbxZiA== + -----END AGE ENCRYPTED FILE----- + - recipient: age15g6tzvcmcp3ae4hwnn4pwewat6eq9unlhtjrlaka6rf94ej9dd5qqpgt7u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3b1dLdTk3L2dZcHAwaURI + MThMZWo2dGRaaUlrTUg1amhuUytLTFB3eVhrCm15Nm9SK0pqMVZETmRDdTBOQVpL + WlExNnhMVmI1bUJQRENWZlI1dmZqa28KLS0tIGZxc2RkbnM2N2VHK0s4anVmaUVj + ZC92TnJZb3NBVUdteHhrNk5pK3QwSmcKbY4gZ0wDYR2A9mG8i69kY1KGi5iiAUWo + jHi0K4vaAQly8IbKnMtxCOlzpLPBg2zCV9zSyOyDYedf1zEt+lnNAw== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-11-11T07:49:49Z" + mac: ENC[AES256_GCM,data:whBphPJ655nUxGsTnyQKWHwXHLbEVH8OSMfXCydYCaHbanAjsM1laupfreJKz36H7LLs3u6ms24NLuOpNgoKve8tjdh2kj7NAFxKagVsP9eoRQcfR10QUN9u6GBRSY5Us46uJekS/yyTd7obA4O0GdG32fR9/o4St/7g3Xod4Zs=,iv:mY3CnvVDgvWliF966dqS0QJN5sLyvVuAy/SS4cfb4XI=,tag:+9QhY39b+N4HGiTQ0HVsjQ==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.1