home

commit 91187877bfa07d7d0e843c93b4fd2313d12c9d04
parent 0cd772dbd7a82bb71001a13429e84a0f22048f5f
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Tue, 26 Oct 2021 14:32:34 +0200

systems: migrated msmtprc to sops-nix…

… first thing to really use sops, now it's time to migrate all the rest.

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
A
secrets/secrets.yaml
 | 
107
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
M
systems/modules/profiles/mail.nix
 | 
4
+++-

2 files changed, 110 insertions(+), 1 deletion(-)
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
@@ -0,0 +1,107 @@
+msmtprc: ENC[AES256_GCM,data:UK3LD90KSvyim3wH3pU7vkHTgyHgZmLjW7nkGjXRvSVsN5Tq0/8daWg6kgUWoaNdQaSIHR7QLRs+5pe3J8brnOuqqmOWgwyguXuq/gWGGVdAc/p3UcCRGxPKgnqAqOG9YSnnHRVJu9nR+TvZFw9Me2aMwf8CDlrxNL55jm81Xk7vO1z3/cnaa6bS4ZrrMfQ/g45woLdB2rkSwdDLIbrfAZt3Amfiu77TB8vyGGTyjxJO7Fm8xT4met/AVUvoV87rieeCmV55BHumZXe3rZc/RgkA,iv:XjPgnXzyOlm8hjc/NG86IuUjGduZTAuwuSZPhO0zD3U=,tag:QsFvme8ug4HLmGK4RKGjhg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-10-26T12:22:49Z"
+    mac: ENC[AES256_GCM,data:8waxJdIbg9mrvANpjEjG5dGFDFE2QH6qoVAnrNhJu6xcAG3GPdVI8SrT04zWuGYZjII1TCbWHUuxNsZ9FKpRlNrctcp4hdJydNU1vDvheAlZxPiu6ToVOD5IODPluUHURGI9GFJjoguLyugOrolox/yVLYQVuNPxhFkTTxxAdWM=,iv:oj/oVC56xW1MYfRHL27yOoQFMHqVM4pixRpJKAcHJGA=,tag:mUq+a4sv0ODXbz+JRh4Mig==,type:str]
+    pgp:
+        - created_at: "2021-10-26T12:21:59Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z3oSgzL9TxAQgAWqyrNgSfPr3zYpc7g58rlquXpt1QjgBaIvcZGAe5TQV4
+            AMfIm5VTSfZJMP/cUyLZ1GP2TC62CEfOlF91Xa+XMu294Ir45JvoqOiViPmJtrqQ
+            nfARwY0dDad6AdlaYvkuRPFD6ut/xM8dNvzLgODf+uahCUTsO6MUBWjrtksRtVGK
+            04/bEJX3roF9ZTIq4Hkq+W1FcohB9oezKc8jIYxwWLaTvspouLyQVoV0eFw15dJq
+            JWdfeZD7wRo149yx31RdBOUp9IrR5nJc93/TFxIvxXOFf0UOUuCfHFT3Z7fb7bwC
+            cskpKnkkR3JGjd6Pb8C5qzy+Ep6dtXaEJbZDbFQzbtLmARnrvGM8yEJlvM2944fe
+            k7LhJUCr8vvbMblvFnWtLhonz88BVesJAoIjDHqaYB6179opYz2GBn+3Y18oqwU1
+            F+TlL4wC2NZ0Ro702JbqEkFG4jf1USwA
+            =YE+M
+            -----END PGP MESSAGE-----
+          fp: 8C4E8DDA04C18C6B503BD2DBB7E7CF1C634256FA
+        - created_at: "2021-10-26T12:21:59Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA01ZgQVEYlRdAQ//fhmVW4rPWO0Ca8X89hPFzfzciTING4X7u0SG0aXlPwjM
+            CwaSa6euVRyrjk62YcSbLBRCWLwjrdOVLGginVbKgc71XXgmaskBegktZ7Greo86
+            zPRNhDu0DfVnkiCFbE+z2/JqGoZmRDsgOPJ1fDsMLJyLmCG1gYPsoN3YKTbiGDZP
+            oUPWEDIDkaXfLDOTcB5aobDQtzGlc9Q0VkEgy42IJZRU9xUCgH0EBwDFT71xBNvl
+            9ofK+BOk4JwwiP9NiYo6LpTwuNEwFdffs3nynyQdgHaUoaChUj4RSc7uuVDw5JY3
+            MKhiylD6nKGTSHCZwglXfyOV3ZkqHx7hjUNRWNipV9MGyRIMwdZ/GE4BXbipAzlJ
+            5VnbylHj07CjwKi55ogTkyDFdKsJINGrrqfe3oIzls9L59dqnNmxT6dJ6q7FLyBY
+            LPqneErXQEfZ/x5/Y9HsiBjHytcFBCK2tu2O0HFsGlXsBD2UPcGAc+TgVXP0Wrrs
+            u9cPJ/u5eQJDi1PUEQ4vGWDTPO8vf3H9qAyB+U88CK/h70VS5nkKMqAnSBSY4trU
+            BDB8RQk4MtXWZ0wqqlYV+H2+q7XxZmfDxjW8q5y6gdS9wQTrv+wGIsPCCFSkirUu
+            zpX2oR3Py0eFkOsXQ75FJxoVRCaBoWBUop8QnGEJ5StGbYUUXxvkkvwA+Uo2Z1DS
+            TgGk2bdwFqzUFZtwA0Vt7D1+i+Pec8CtAvzpqispWwUX7KZoZ1Gao8zOwXjhxBh5
+            0aV/UmFHug85yV1th8duTw9QwST9l5Qyxayio/Fsmg==
+            =9KWz
+            -----END PGP MESSAGE-----
+          fp: b14ab1e44008e7d4c39875324d5981054462545d
+        - created_at: "2021-10-26T12:21:59Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMoaz6prFK7ARAAnUUH0p/iFAjD+UMTAR6/WugIODWCzztxcVgw1whA+lxb
+            po7C7kXaiBGUPjlN3jA1AwSwPdwfJtb6X8pNvoQ2TRun1ECEo1gDefrDOicvQcZR
+            VzqgNdieW+BEdmqDD44z7fBCrehVpwhfJbM3tAoaH2eGO9KnxCxOkppq9nb47+25
+            RiBhS8ZLJTeo64Q9h9Eovxfw2RuobQqvvFKp26bsQJ7bMotAy602R3haPY1uxxlm
+            sSujzya5DwsvIrWZABC5C4gv0VN9JZkYxgSSxMzskH5FSO/EvjyUJJrypRmujQvJ
+            Hanr+BMO+oAp3hPytsjHoAREAxTGrimoOut3jztIpBhaI31K+N/pqakDwbT/agxd
+            OrU7W0AUgarJBnN6hKGjF2gEBMgWfcv5CsyjidC4AbMno5Xck1ddqi8auDsNWuuC
+            xrqlXh9lPLDQSp+N1DBAz0pXkMEp7FDzbsnuJPirR+Vj9NKkMMtXyCyh7JOijuaQ
+            Qp8oBkzrv/mFRqCku0xKjXIaHIV6Gb1M5BK5rY+jHYauyMRxuepesuIJpRmh+rH5
+            efQoAaonRRWfs2E5928b1y6UPiouBGQ1s75lKYlojm81izegOqifunzZ37XVxxjP
+            ToK9spLqI1vmGeMxFshFTZ/wc0SE+G7lMXu51/rJ9OW5xrxneQntYC2MydOEsufS
+            TgFZaWhvzYs34WO3Rd94GVw7cjRR6hVrn1hW1lmrRhvq6vHM0Iwrq9xY1iUEMPlb
+            OhE0wlJnx6lRHiYM05hROwyT3txP7C12oJaOqcy4Dg==
+            =Xp53
+            -----END PGP MESSAGE-----
+          fp: 3f65577842cabda3955d1f5603286b3ea9ac52bb
+        - created_at: "2021-10-26T12:21:59Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA2mSi1kI4Qy/AQ//VHWW8pMAegCe3aHHLmXcfbCVLLPDg2TUTdYrEXzhwWyA
+            sNvlFWHqX3iyA7BXW5mnJvMF6mRhj1H5tdAqPywzYpPgNqFOug+PzV3MYppws0AZ
+            ALhCaz0didrSRV8KzWuvAnMmzGPvDnNUgKqNPHHQ6y8fr3SYKs46y2ouYsG3urCR
+            +b/zm64/FOaCsGffVZBRYzh6ET312kOu8Kilju2Gli4WS5svA/d8A49alWRRAWA5
+            C7GHeEht6cXdZI3kZongYRNuyva57l030yvshrSRSxXgB98TcG+8xbAN6PJ3X5wZ
+            V323iWSjlKVybSQR4BmYzOB3oJSiBg+SPm/MqTI0p//wjZiFqPQ3q907C11UjMOG
+            8IGMg8bw3snu9FWBHb7bbB/t2GPha5X2av6dPJkK8B7OI7ydCF1T0WVOXg/sBs9U
+            BSi7Bx6x4/GU3swskEAsB/K3cVblEy+A5jCZIVIq0jMPwKjrsulnu8xrSk0ICg0v
+            MXRcfOIkeYrPX6QVcE1h1wZF9RSckyZ9uRRAGPIxhw1JfiJNmVfT29zoKShZfQB5
+            SpGfxURyKQeJlZyn2Zm5pXKQ2Yn6ArKgDNY37nfKKFP2ian+Uf0RIR8S6gnJ5QDQ
+            O4+59PrTYtUq11bHsPRrvPWHOPKIhFR2QEp+P+VcB5dIiMlKaYn86jzx909vvZbS
+            TgE2uYRORlIitIfOcdwqB9Z3j4Ug7OiGPNoh6NzTsaMw3Ism+GMrdExwxqXlx3Do
+            VXmIysnoa+tEQZfc8RsS63/bWSQuHt8ggf+EYgEwnA==
+            =5yZu
+            -----END PGP MESSAGE-----
+          fp: 8b80ab02638ab9c34f6c21bd69928b5908e10cbf
+        - created_at: "2021-10-26T12:21:59Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAzHwOG8g8+TsARAAxaHHokzVYW9bKp1EeqaxWx3ZxCFjEIzYYXvYuHcEQaTf
+            5QjqN1EtBS3BV45y91MJnTjRa25jyaWX3OFYz2eupbWeEwNcziApZm/LAfBy3gs8
+            ZxjHPtwEBDtpFZb3gtJKwIMDmaRSwT2JmyuQFD2o6UYk01znREsrBYA81LLxJJiV
+            Qt6V1gYmhLDq4DEGIKEbMMtU1xoZwlJhfC9TWYonCKwmmfy9FshVjxSFppomHUfL
+            7Y4BN1MpXxCuBIiBdCRJJaZM+ok+MybFog8tDNfsyMHCYInpXEiEg+Z4d6Gka6zh
+            nLqCFoz6Z9X2SCIhfFPHHji+i5Dxok8qk332TZUlbQKO0iylRmzLqfnN8wnFa/oA
+            h4Mtj+KwOEpJhcnEL80s5SmBy6rOYpGALYWOLmp1bh0+GCsIW/IRLzBptRT/Dwzi
+            LdosObCqh1kHOtzDD9+tZPEQWV0t4ETLSED5+MA1kcFEMKmo56AU20c01Hd5Gn7d
+            fkle245A4lZvrLGguvAMxz9LH1eOVc1yVVhUPkN4Et7ZxmiV0xkylJutRpTO51Vr
+            uzR19YnyXscd7jMYa2+wKforw32C/1ncS7WuxdSRebi8qFH6/UkYq5tfJNhHdGhf
+            PtVF0mhxsSbOGO2a9dNbdAfdvRJJ0XmfubTxxfKkBcLpVApAu8Dc8x5o0b2a7aTS
+            TgHHTPUh98lbSOLcX7xDtOBu+Y87lCp2SU+FtiLEM8K0KJB3awklpEv8tSPoAQZn
+            HbdrB9zq/2shB2Tw7l8nDfEJL4gq/UbJ7i3b1HxaLw==
+            =ldrb
+            -----END PGP MESSAGE-----
+          fp: b8b02c0885a74753f8fb53f031f0386f20f3e4ec
+    unencrypted_suffix: _unencrypted
+    version: 3.7.1
diff --git a/systems/modules/profiles/mail.nix b/systems/modules/profiles/mail.nix
@@ -17,7 +17,9 @@ in
     };
   };
   config = mkIf (cfg.enable && secretCondition) {
-    environment.etc."msmtprc".source = pkgs.mkSecret ../../../secrets/msmtprc;
+    sops.secrets.msmtprc = {
+      path = "/etc/msmtprc";
+    };
     environment.systemPackages = with pkgs; [ msmtp ];
   };
 }