add mail config

.sops.yaml

@@ -49,3 +49,8 @@ creation_rules:
           - *pc-installer
           - *rainbow-resort
           - *thinkrac
+  - path_regex: programs/desktop/pim/secrets.yaml$
+    key_groups:
+      - age:
+          - *base
+          - *darkkirb

programs/desktop/home-manager.nix

@@ -10,6 +10,7 @@
     ./pim.nix
     "${nixos-config}/services/desktop"
     ./kodi
+    ./pim
   ];
   home.packages = with pkgs; [
     kdePackages.kalk

programs/desktop/pim/calendar.nix

@@ -0,0 +1,22 @@
+{ pkgs, config, ... }:
+{
+  accounts.calendar.accounts.lotte = {
+    khal = {
+      enable = true;
+      addresses = [ "lotte@chir.rs" ];
+    };
+    primary = true;
+    remote = {
+      passwordCommand = [
+        "${pkgs.coreutils}/bin/cat"
+        config.sops.secrets."accounts/calendar/accounts/lotte/remote/password".path
+      ];
+      type = "caldav";
+      url = "https://calendar.zoho.eu/caldav/423167e221264cf4af974b9faa0abc3b/events/";
+      userName = "lotte@chir.rs";
+      vdirsyncer.enable = true;
+    };
+  };
+  accounts.calendar.basePath = "Data/calendar";
+  sops.secrets."accounts/calendar/accounts/lotte/remote/password".sopsFile = ./secrets.yaml;
+}

programs/desktop/pim/contacts.nix

@@ -0,0 +1,22 @@
+{ pkgs, config, ... }:
+{
+  accounts.contact.accounts.lotte = {
+    khal = {
+      enable = true;
+      addresses = [ "lotte@chir.rs" ];
+    };
+    khard.enable = true;
+    remote = {
+      passwordCommand = [
+        "${pkgs.coreutils}/bin/cat"
+        config.sops.secrets."accounts/contact/accounts/lotte/remote/password".path
+      ];
+      type = "carddav";
+      url = "https://contacts.zoho.eu/carddav/lotte@chir.rs/default/contacts";
+      userName = "lotte@chir.rs";
+      vdirsyncer.enable = true;
+    };
+  };
+  accounts.calendar.basePath = "Data/contacts";
+  sops.secrets."accounts/contact/accounts/lotte/remote/password".sopsFile = ./secrets.yaml;
+}

programs/desktop/pim/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+{
+  imports = [
+    ./calendar.nix
+    ./contacts.nix
+    ./email.nix
+  ];
+}

programs/desktop/pim/email.nix

@@ -0,0 +1,50 @@
+{ pkgs, config, ... }:
+{
+  accounts.email.accounts.lotte = {
+    address = "lotte@chir.rs";
+    imap.host = "imappro.zoho.eu";
+    imapnotify = {
+      enable = true;
+      onNotify = "${pkgs.isync}/bin/mbsync test-%s";
+      onNotifyPost.mail = "${pkgs.notmuch}/bin/notmuch new && ${pkgs.libnotify}/bin/notify-send 'New mail arrived'";
+    };
+    mbsync = {
+      enable = true;
+      create = "both";
+      expunge = "both";
+    };
+    msmtp.enable = true;
+    notmuch = {
+      enable = true;
+      neomutt = {
+        enable = true;
+        virtualMailboxes = [
+          {
+            name = "Inbox";
+            query = "tag:inbox";
+          }
+        ];
+      };
+    };
+    passwordCommand = [
+      "${pkgs.coreutils}/bin/cat"
+      config.sops.secrets."accounts/email/accounts/lotte/password".path
+    ];
+    realName = "Charlotte 🦝 Delenk";
+    smtp.host = "smtppro.zoho.eu";
+    thunderbird.enable = true;
+    userName = "lotte@chir.rs";
+    primary = true;
+  };
+  accounts.email.maildirBasePath = "Data/Maildir";
+  sops.secrets."accounts/email/accounts/lotte/password".sopsFile = ./secrets.yaml;
+  services.imapnotify.enable = true;
+  programs.notmuch.enable = true;
+  programs.thunderbird = {
+    enable = true;
+    profiles.default = {
+      isDefault = true;
+      withExternalGnupg = true;
+    };
+  };
+}

programs/desktop/pim/secrets.yaml

@@ -0,0 +1,44 @@
+accounts:
+    calendar:
+        accounts:
+            lotte:
+                remote:
+                    password: ENC[AES256_GCM,data:Y+ITsQj6vFJ2Jgk8,iv:ZrdVVxh2L9pJKhLWaz3BE+IU0xasn4WQ1Jm0kpnWMLI=,tag:gTJsmCNqnKNbhBXJipijbA==,type:str]
+    contact:
+        accounts:
+            lotte:
+                remote:
+                    password: ENC[AES256_GCM,data:Swzr3KZgLh5EMo1J,iv:QQl0mUbs9uCgFlv+GgOFxAJ+YkUmjwayMM3TR0W0teE=,tag:Ha+8dv7299lPiPDoXU2Lig==,type:str]
+    email:
+        accounts:
+            lotte:
+                password: ENC[AES256_GCM,data:+Sf6HN8A1ULHW7nX,iv:yG2I0IX4OQysLbMb4B+k7T9uxxvb4WEs0gcpLXO+mG0=,tag:pLTYJZlPeGrw/Ws4nA8KKw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1tltjgexkp5fz3rum4j0k66ty5q4u8ptvkgkepumd20zal24g2qfs5xgw76
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzZit5SC9uVEpHUlFLSlVj
+            NWdyK3FLaTIwYnowdDdVWXJhVUcyczNEckVZCmdpU1VQZTFpeDRMN0FBTU0wOGs2
+            MTBWTFg1V21BUitpWXZUbSs5bHJHSTAKLS0tICttZk1ldGFoaEloYmErR3J6OHA5
+            V0FCYjdlckhkR3VOWjJkdDFFMzJucUkKC+Ru5SgA1h/vNV95L4homj8jIHgJ8OLc
+            YbkptH9Yk86491HxgbXNfDjYTxyemOldD5Z9TGWIGkXPQNpTIbxZiA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15g6tzvcmcp3ae4hwnn4pwewat6eq9unlhtjrlaka6rf94ej9dd5qqpgt7u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3b1dLdTk3L2dZcHAwaURI
+            MThMZWo2dGRaaUlrTUg1amhuUytLTFB3eVhrCm15Nm9SK0pqMVZETmRDdTBOQVpL
+            WlExNnhMVmI1bUJQRENWZlI1dmZqa28KLS0tIGZxc2RkbnM2N2VHK0s4anVmaUVj
+            ZC92TnJZb3NBVUdteHhrNk5pK3QwSmcKbY4gZ0wDYR2A9mG8i69kY1KGi5iiAUWo
+            jHi0K4vaAQly8IbKnMtxCOlzpLPBg2zCV9zSyOyDYedf1zEt+lnNAw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-11T08:57:33Z"
+    mac: ENC[AES256_GCM,data:cGooQpFW9SrmvFwxhBfUI/BUjYbrQTfyqvsa1vhdc9S1M+VFKzrmIfaSpuFslj6///WbvQKpi9qcqWNhCdr6wWMCSR14ewMk57i0l3AsmfT4j3yElMl15+ereQMZ3z2c1NbU4x1ZP0OSCPAXUgr44qzY3EVziQrwbNRlAGqkk8M=,iv:U7O9mFyD6rA1efTlQKcl13vLC9TPekiDfCJGbAYtjPk=,tag:K3sd6T+wSdWdOU8VkEnbOw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.1