diff --git a/modules/mail/default.nix b/modules/mail/default.nix index d9538f8..2cfe795 100644 --- a/modules/mail/default.nix +++ b/modules/mail/default.nix @@ -5,6 +5,7 @@ in { imports = [(self + /modules/acme)]; secrets.mailPassword.file = ./password.hash.age; + secrets.mailSupercellPassword.file = ./password-supercell.hash.age; services.prometheus.exporters.postfix = enabled { listenAddress = "[::]"; @@ -47,5 +48,9 @@ in { hashedPasswordFile = config.secrets.mailPassword.path; }; + + loginAccounts."supercell@${head config.mailserver.domains}" = { + hashedPasswordFile = config.secrets.mailSupercellPassword.path; + }; }; } diff --git a/modules/mail/password-supercell.hash.age b/modules/mail/password-supercell.hash.age new file mode 100644 index 0000000..95fced2 --- /dev/null +++ b/modules/mail/password-supercell.hash.age @@ -0,0 +1,14 @@ +age-encryption.org/v1 +-> ssh-ed25519 8y3T6w 7MlLKDv1LkktoxfqBACo3xWy57Fx06JoYxd9ulzcGmw +TVG9E2Rpg8rWid5TpIZ92/tfcTq2c0G7eETtfBw2Plk +-> ssh-ed25519 CzqbPQ eOLBdKhn6GbRR+onkx/s3ckAbOgOQtqMzGJ1RnNfPDk +Y6AbGQ/A3yz5NXtHwNmkpQ22iSsxhAPmGTmTZ33fDWk +-> ssh-ed25519 spFFQA 4nwws/kcg2zRTCV1ueRVCsRxpMPp+t0GJsXw5wctfDU +IsEoeUKqN3Hl/pE8Z9PHxPCY//L6+AdSDvCd3cteDDI +-> ssh-ed25519 dASlBQ qaJzxEnf7gJJPzxORJnHtf5lqoe6aSABlOzM7pHUyXY +AKiIVshtotzsK8mFMJoOlnSpijglptlUXrtTHnpLWrA +-> ssh-ed25519 CzqbPQ 1UikL5fcVjJh42hETexFbdT1fgfzBh/+8MCrqSoCQFk +8M7OlL0MKGfiu2ePRUy/KqHEvj8PJLSysRBGpLPE1Co +--- pSHliaVtpsFJvIGQgxoGrqF7/cvnjIGOE5PVRCS2hxA +p[zk +E,kc=Xnwn?[k,{نaVv$01#UOKن +fy#*,n*:mw'4ڮO4]O) \ No newline at end of file diff --git a/secrets.nix b/secrets.nix index 5595d9b..bcd1bb7 100644 --- a/secrets.nix +++ b/secrets.nix @@ -45,7 +45,8 @@ in { "modules/common/ssh/config.age".publicKeys = all; "modules/linux/restic/password.age".publicKeys = all; - "modules/acme/environment.age".publicKeys = all; - "modules/mail/password.hash.age".publicKeys = all; - "modules/mail/password.plain.age".publicKeys = all; + "modules/acme/environment.age".publicKeys = all; + "modules/mail/password.hash.age".publicKeys = all; + "modules/mail/password.plain.age".publicKeys = all; + "modules/mail/password-supercell.hash.age".publicKeys = all; }