mail: add separate supercell account

modules/mail/default.nix

@@ -5,6 +5,7 @@ in {
   imports = [(self + /modules/acme)];
 
   secrets.mailPassword.file = ./password.hash.age;
+  secrets.mailSupercellPassword.file = ./password-supercell.hash.age;
 
   services.prometheus.exporters.postfix = enabled {
     listenAddress = "[::]";
@@ -47,5 +48,9 @@ in {
 
       hashedPasswordFile = config.secrets.mailPassword.path;
     };
+
+    loginAccounts."supercell@${head config.mailserver.domains}" = {
+      hashedPasswordFile = config.secrets.mailSupercellPassword.path;
+    };
   };
 }

modules/mail/password-supercell.hash.age

@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 8y3T6w 7MlLKDv1LkktoxfqBACo3xWy57Fx06JoYxd9ulzcGmw
+TVG9E2Rpg8rWid5TpIZ92/tfcTq2c0G7eETtfBw2Plk
+-> ssh-ed25519 CzqbPQ eOLBdKhn6GbRR+onkx/s3ckAbOgOQtqMzGJ1RnNfPDk
+Y6AbGQ/A3yz5NXtHwNmkpQ22iSsxhAPmGTmTZ33fDWk
+-> ssh-ed25519 spFFQA 4nwws/kcg2zRTCV1ueRVCsRxpMPp+t0GJsXw5wctfDU
+IsEoeUKqN3Hl/pE8Z9PHxPCY//L6+AdSDvCd3cteDDI
+-> ssh-ed25519 dASlBQ qaJzxEnf7gJJPzxORJnHtf5lqoe6aSABlOzM7pHUyXY
+AKiIVshtotzsK8mFMJoOlnSpijglptlUXrtTHnpLWrA
+-> ssh-ed25519 CzqbPQ 1UikL5fcVjJh42hETexFbdT1fgfzBh/+8MCrqSoCQFk
+8M7OlL0MKGfiu2ePRUy/KqHEvj8PJLSysRBGpLPE1Co
+--- pSHliaVtpsFJvIGQgxoGrqF7/cvnjIGOE5PVRCS2hxA
+pÖ[zkÙù
+ÓEŸÊ,<2C>kícÑ=Xn<58>þª»wnø³?µ‹[Ðk,{Ù†aVˆv$0¯Í1#‰UÄO
K‚Ù†¸
+‰fy#ó×æŠïš*ö¢,nô*¿³‰:ÿŠmÇöÓw'€4Ú®åO4]O)

secrets.nix

@@ -45,7 +45,8 @@ in {
   "modules/common/ssh/config.age".publicKeys     = all;
   "modules/linux/restic/password.age".publicKeys = all;
 
-  "modules/acme/environment.age".publicKeys    = all;
-  "modules/mail/password.hash.age".publicKeys  = all;
-  "modules/mail/password.plain.age".publicKeys = all;
+  "modules/acme/environment.age".publicKeys              = all;
+  "modules/mail/password.hash.age".publicKeys            = all;
+  "modules/mail/password.plain.age".publicKeys           = all;
+  "modules/mail/password-supercell.hash.age".publicKeys  = all;
 }